CVE-2026-4966: itsourcecode Free Hotel Reservation System index.php sql injection
A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/modroom/index.php?view=edit. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4966?
CVE-2026-4966 has a severity level that can lead to significant database compromise due to SQL injection vulnerabilities.
How do I fix CVE-2026-4966?
To fix CVE-2026-4966, ensure that you sanitize and validate all user inputs in the affected index.php file.
What type of vulnerability is CVE-2026-4966?
CVE-2026-4966 is classified as an SQL injection vulnerability affecting the itsourcecode Free Hotel Reservation System.
Which version of itsourcecode Free Hotel Reservation System is affected by CVE-2026-4966?
CVE-2026-4966 affects the itsourcecode Free Hotel Reservation System version 1.0.
Where is the vulnerable argument located in CVE-2026-4966?
The vulnerable argument is located in the /admin/mod_room/index.php file, specifically in the 'view' parameter.