Beveiligingsadvies

CVE-2026-4612

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-23 21:57:21
Laatst bijgewerkt 2026-03-24 13:42:58
Toegewezen door VulDB
CVSS-score 7.5
Status PUBLISHED

Beschrijving

A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. This affects an unknown part of the file /hotel/admin/mod_users/index.php?view=edit&id=8 of the component Parameter Handler. The manipulation of the argument account_id leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.