PT-2026-35447 · Code Projects · Online Hotel Reservation System

Z0Ng · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7134

Mitre

CVSS v3.1

4.7

Medium

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of the file /edithousepic.php. Such manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-7134

Affected Products

Online Hotel Reservation System

References · 7

• 🔥 https://github.com/zzk6th/cve/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7134 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/359733/cti · Note
• https://vuldb.com/vuln/359733 · Note
• https://twitter.com/VulmonFeeds/status/2048809398789665262 · Twitter Post
• https://vuldb.com/submit/800983 · Note