CVE-2026-3771
Medium · 6.3CVSS
6.3
EPSS
0.3%
Published
Mar 8, 2026
CISA due date
—
The record
A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119619 A vulnerability was found in 37954679 cak-filemanagement-system up to… CWE-74
- CVE-2026-91915 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization… CWE-74
- CVE-2026-89435 The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes &… CWE-74
- CVE-2026-54453 OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing… CWE-74
- CVE-2026-118258 i18next-http-backend is a backend layer for i18next that loads translation resources in… CWE-74
- CVE-2026-103405 An Improper Neutralization of Special Elements in Output Used by a Downstream Component… CWE-74
- CVE-2026-103400 An Improper Neutralization of Special Elements in Output Used by a Downstream Component… CWE-74
- CVE-2026-106648 The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted… CWE-74