Janobe Resort Reservation System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Janobe Resort Reservation System: 3 record(s), with affected versions and fixes.
CVE-2026-3806
High · 8.8
CWE-89 Mar 9, 2026
SourceCodester/janobe Resort Reservation System room_rates.php sql injection
A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /room_rates.php. This manipulation of the argument q causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-3800
High · 8.8
CWE-434 Mar 9, 2026
SourceCodester/janobe Resort Reservation System controller.php doInsert unrestricted upload
A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?action=add. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-3771
High · 8.8
CWE-89 Mar 8, 2026
SourceCodester/janobe Resort Reservation System accomodation.php sql injection
A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.