Free Hotel Reservation System

2 CVEs product

Monthly

CVE-2026-4237 HIGH POC This Week

SQL injection in Free Hotel Reservation System 1.0 allows unauthenticated remote attackers to manipulate the Home parameter in /hotel/admin/mod_reports/index.php and execute arbitrary database queries. Public exploit code exists for this vulnerability, and no patch is currently available. Affected systems running the vulnerable PHP application are at immediate risk of data theft and database compromise.

SQLi PHP Free Hotel Reservation System
NVD VulDB GitHub
CVSS 3.1
7.3
EPSS
0.0%
CVE-2026-3730 HIGH POC This Week

SQL injection in Free Hotel Reservation System 1.0 allows remote attackers to manipulate the amen_id and rmtype_id parameters in the amenities management interface, enabling unauthorized database access and potential data modification. Public exploit code exists for this vulnerability, and no patch is currently available. The flaw affects PHP-based installations and requires no authentication or user interaction to exploit.

PHP SQLi Free Hotel Reservation System
NVD GitHub VulDB
CVSS 3.1
7.3
EPSS
0.0%
CVE-2026-4237
EPSS 0% CVSS 7.3
HIGH POC This Week

SQL injection in Free Hotel Reservation System 1.0 allows unauthenticated remote attackers to manipulate the Home parameter in /hotel/admin/mod_reports/index.php and execute arbitrary database queries. Public exploit code exists for this vulnerability, and no patch is currently available. Affected systems running the vulnerable PHP application are at immediate risk of data theft and database compromise.

SQLi PHP Free Hotel Reservation System
NVD VulDB GitHub
CVE-2026-3730
EPSS 0% CVSS 7.3
HIGH POC This Week

SQL injection in Free Hotel Reservation System 1.0 allows remote attackers to manipulate the amen_id and rmtype_id parameters in the amenities management interface, enabling unauthorized database access and potential data modification. Public exploit code exists for this vulnerability, and no patch is currently available. The flaw affects PHP-based installations and requires no authentication or user interaction to exploit.

PHP SQLi Free Hotel Reservation System
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy