PT-2026-30421 · Itsourcecode · Free Hotel Reservation System

Zzzhe · Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5551

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions itsourcecode Free Hotel Reservation System version 1.0

Description A security flaw exists in itsourcecode Free Hotel Reservation System 1.0. The vulnerability is located in unknown code within the /hotel/admin/login.php file, specifically within the Parameter Handler component. Manipulation of the email argument can lead to SQL injection. The attack can be launched remotely, and an exploit has been publicly released.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /hotel/admin/login.php file.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-5551

Affected Products

Free Hotel Reservation System

References · 8

• 🔥 https://github.com/jasonwong666/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5551 · Security Note
• https://twitter.com/infoflowcloud/status/2040718806117487048 · Twitter Post
• https://itsourcecode.com · Note
• https://vuldb.com/vuln/355315 · Note
• https://twitter.com/CVEnew/status/2040716621501681790 · Twitter Post
• https://vuldb.com/submit/782845 · Note
• https://vuldb.com/vuln/355315/cti · Note