CVE-2026-3806: SourceCodester/janobe Resort Reservation System room_rates.php sql injection
A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /roomrates.php. This manipulation of the argument q causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3806?
CVE-2026-3806 is classified as a high severity vulnerability due to its SQL injection nature, which can lead to unauthorized access to sensitive data.
How do I fix CVE-2026-3806?
To fix CVE-2026-3806, ensure to sanitize and validate all user inputs in the room_rates.php file to prevent SQL injection attacks.
What versions of SourceCodester/janobe are affected by CVE-2026-3806?
CVE-2026-3806 affects SourceCodester/janobe Resort Reservation System version 1.0.
What is the impact of exploiting CVE-2026-3806?
Exploiting CVE-2026-3806 could allow an attacker to execute arbitrary SQL queries, potentially compromising the database.
Are there any workarounds for CVE-2026-3806?
As a workaround for CVE-2026-3806, implementing strict input validation and using prepared statements can help mitigate SQL injection risks.