CVE-2026-4237: itsourcecode Free Hotel Reservation System index.php sql injection
A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/modreports/index.php. Executing a manipulation of the argument Home can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4237?
The severity of CVE-2026-4237 is classified as critical due to its potential for remote SQL injection.
How do I fix CVE-2026-4237?
To fix CVE-2026-4237, sanitize and validate all user inputs in the /hotel/admin/mod_reports/index.php file.
What are the risks associated with CVE-2026-4237?
The risks associated with CVE-2026-4237 include unauthorized database access and potential data breaches.
Which versions are affected by CVE-2026-4237?
CVE-2026-4237 affects version 1.0 of the itsourcecode Free Hotel Reservation System.
Can CVE-2026-4237 be exploited remotely?
Yes, CVE-2026-4237 can be exploited remotely through crafted requests to the vulnerable endpoint.