CVE-2026-4966

A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

• CWE-74
• CWE-89

• https://github.com/bybinyu/Vulnerability-Practice/issues/8
• https://itsourcecode.com/
• https://vuldb.com/?ctiid.353843
• https://vuldb.com/?id.353843
• https://vuldb.com/?submit.777683

Published

Mar 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4960A vulnerability was determined in Tenda AC6 15.03.05.16. Aff…8.8
• CVE-2026-4961A vulnerability was identified in Tenda AC6 15.03.05.16. Aff…8.8
• CVE-2026-4962A security flaw has been discovered in UltraVNC up to 1.6.4.…7
• CVE-2026-4963A weakness has been identified in huggingface smolagents 1.2…10
• CVE-2026-4964A security vulnerability has been detected in letta-ai letta…6.5
• CVE-2026-4965A vulnerability was detected in letta-ai letta 0.16.4. This …9.8
• CVE-2026-4967In IMS, there is a possible out of bounds read due to a miss…7.5
• CVE-2026-4968A vulnerability was determined in SourceCodester Diary App 1…4.3
• CVE-2026-4969A vulnerability was identified in code-projects Social Netwo…3.5
• CVE-2026-4970A security flaw has been discovered in code-projects Social …6.3
• CVE-2026-4971A weakness has been identified in SourceCodester Note Taking…4.3
• CVE-2026-4972A security vulnerability has been detected in code-projects …2.4