Free Hotel Reservation System
Approved changes feed: RSS · Atom
cpe:2.3:a:itsourcecode:free_hotel_reservation_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Itsourcecode (14c06684-839a-5802-ab2e-bd37208c001a) |
|---|---|
| Product | Free Hotel Reservation System (906c64e0-71fd-568c-b51c-c1dcec03f01c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5551 |
vulnerable | 2026-06-08 08:07:03.823520 |
itsourcecode Free Hotel Reservation System Parameter login.php sql injection
HIGH (7.3)
A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/login.php of the component Parameter Handler. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-05T08:15:11.127Z
Updated: 2026-04-06T15:29:46.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4966 |
vulnerable | 2026-06-08 08:07:02.718932 |
itsourcecode Free Hotel Reservation System index.php sql injection
MEDIUM (6.3)
A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
Published: 2026-03-27T17:41:49.607Z
Updated: 2026-03-27T22:08:05.053Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4876 |
vulnerable | 2026-06-08 08:07:02.575383 |
itsourcecode Free Hotel Reservation System index.php sql injection
MEDIUM (6.3)
A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/mod_amenities/index.php?view=editpic. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Published: 2026-03-26T13:05:36.261Z
Updated: 2026-03-26T13:58:15.118Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4875 |
vulnerable | 2026-06-08 08:07:02.574881 |
itsourcecode Free Hotel Reservation System index.php unrestricted upload
MEDIUM (4.7)
A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /admin/mod_amenities/index.php?view=add. This manipulation of the argument image causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-03-26T12:23:31.296Z
Updated: 2026-03-28T02:17:22.840Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4612 |
vulnerable | 2026-06-08 08:05:13.587813 |
itsourcecode Free Hotel Reservation System Parameter index.php sql injection
HIGH (7.3)
A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. This affects an unknown part of the file /hotel/admin/mod_users/index.php?view=edit&id=8 of the component Parameter Handler. The manipulation of the argument account_id leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Published: 2026-03-23T21:57:21.470Z
Updated: 2026-03-24T13:42:58.804Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4237 |
vulnerable | 2026-06-08 08:05:13.058105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3730 |
vulnerable | 2026-06-08 08:01:19.285213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.