Sourcecodester · Hotel Management System · CVE-2026-7506
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Hotel Management System version 1.0
**Description**
An issue exists in the '/index.php/reservation/check' endpoint where manipulation of the `room type` argument allows for SQL injection, which is a technique used to interfere with the queries that an application makes to its database. This attack can be executed remotely.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.