CVE-2026-3800 - Vulnerability Analysis

Overview

SourceCodester janobe Resort Reservation System 1.0 contains an unrestricted file upload vulnerability caused by improper validation of the "image" argument in /controller.php?action=add, letting remote attackers upload arbitrary files, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can upload arbitrary files, potentially leading to remote code execution or server compromise.

Mitigation

Update to the latest version or apply patches that restrict file upload validation.

References

• https://vuldb.com/?ctiid.349767
• https://vuldb.com/?id.349767
• https://vuldb.com/?submit.768978
• https://vuldb.com/?submit.768998
• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Resort-Reservation-System---Unrestricted-Upload.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner