CVE-2026-4612
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Mar 23, 2026
Vendor
unknown
Description
A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. This affects an unknown part of the file /hotel/admin/mod_users/index.php?view=edit&id=8 of the component Parameter Handler. The manipulation of the argument account_id leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.