CVE-2026-3800

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?action=add. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

• CWE-284
• CWE-434
• CWE-434

• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Resort-Reservation-System---Unrestricted-Upload.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.349767Permissions Required, VDB Entry
• https://vuldb.com/?id.349767Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.768978Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.768998Third Party Advisory, VDB Entry

Published

Mar 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-37979A flaw was found in Keycloak. This access control vulnerabil…6.5
• CVE-2026-3798A vulnerability was detected in Comfast CF-AC100 2.6.0.8. Th…7.2
• CVE-2026-37980A flaw was found in Keycloak, specifically in the organizati…4.8
• CVE-2026-37981A flaw was found in Keycloak. A broken access control vulner…4.3
• CVE-2026-37982A flaw was found in Keycloak. This authentication vulnerabil…6.8
• CVE-2026-3799A flaw has been found in Tenda i3 1.0.0.6(2204). This impact…8.8
• CVE-2026-3801A vulnerability was found in Tenda i3 1.0.0.6(2204). Affecte…8.8
• CVE-2026-3802A vulnerability was determined in Tenda i3 1.0.0.6(2204). Af…8.8
• CVE-2026-3803A vulnerability was identified in Tenda i3 1.0.0.6(2204). Th…8.8
• CVE-2026-3804A security flaw has been discovered in Tenda i3 1.0.0.6(2204…8.8
• CVE-2026-3805When doing a second SMB request to the same host again, curl…7.5
• CVE-2026-38056A local privilege escalation vulnerability exists in the iDi…8.8