itsourcecode free hotel reservation system vulnerabilities

Latest itsourcecode free hotel reservation system CVEs

Newest publication first

1. CVE-2026-5551 itsourcecode Free Hotel Reservation System Parameter login.php sql injection

   Published 2026-04-05

   Medium·CVSS 6.9 EPSS 0.26%

   A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/login.php of the component Parameter Handler. The manipulation of the argument email results in sql injection. The attack may be...

2. CVE-2026-4966 itsourcecode Free Hotel Reservation System index.php sql injection

   Published 2026-03-27

   Medium·CVSS 5.3 EPSS 0.26%

   A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has be...

3. CVE-2026-4876 itsourcecode Free Hotel Reservation System index.php sql injection

   Published 2026-03-26

   Medium·CVSS 5.3 EPSS 0.20%

   A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/mod_amenities/index.php?view=editpic. Such manipulation of the argument ID leads to sql injection. The attack may be performed from rem...

4. CVE-2026-4875 itsourcecode Free Hotel Reservation System index.php unrestricted upload

   Published 2026-03-26

   Medium·CVSS 5.1 EPSS 0.23%

   A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /admin/mod_amenities/index.php?view=add. This manipulation of the argument image causes unrestricted upload. The attack is possible to be carr...

5. CVE-2026-4612 itsourcecode Free Hotel Reservation System Parameter index.php sql injection

   Published 2026-03-23

   Medium·CVSS 6.9 EPSS 0.27%

   A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. This affects an unknown part of the file /hotel/admin/mod_users/index.php?view=edit&id=8 of the component Parameter Handler. The manipulation of the argument account_id leads to sql injection. Remot...

6. CVE-2026-4237 itsourcecode Free Hotel Reservation System index.php sql injection

   Published 2026-03-16

   Medium·CVSS 6.9 EPSS 0.30%

   A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/mod_reports/index.php. Executing a manipulation of the argument Home can lead to sql injection. The attack may be performed from remote. The e...

7. CVE-2026-3730 itsourcecode Free Hotel Reservation System index.php sql injection

   Published 2026-03-08

   Medium·CVSS 6.9 EPSS 0.41%

   A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?view=edit. Performing a manipulation of the argument amen_id/rmtype_id results in sql injection. The...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.