CVE-2026-3771 - Vulnerability Analysis

Overview

SourceCodester janobe Resort Reservation System 1.0 contains a SQL injection caused by manipulation of the "q" argument in /accomodation.php, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version or apply patches to fix the SQL injection vulnerability.

References

• https://vuldb.com/?submit.768925
• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Resort-Reservation-System---SQLi.md
• https://vuldb.com/?ctiid.349749
• https://vuldb.com/?id.349749

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner