Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-13552

itsourcecode Online Hotel Management System controller.php edit sql injection

Description

A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_amenities/controller.php?action=edit. Performing a manipulation of the argument amen_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

itsourcecode Online Hotel Management System

  • 1.0affected

References