CVE-2026-3806

MEDIUM

janobe Resort Reservation System 1.0 - SQL Injection

Title source: llm

Description

A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /room_rates.php. This manipulation of the argument q causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

References (4)

Scores

CVSS v3 6.3
EPSS 0.0003
EPSS Percentile 6.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-89 CWE-74
Status published

Affected Products (1)

oretnom23/resort_reservation_system

Timeline

Published Mar 09, 2026
Tracked Since Mar 09, 2026