VulnSocial

CVE-2026-4966Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 4 classified signals
  • Peaked at 3 mentions on most recent observed day (2026-03-28)
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-03-27: 1Mentions · 2026-03-28: 3Technical Details · 2026-03-27: 1Technical Details · 2026-03-28: 203-2703-28
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-03-271
Disclosure1
2026-03-283
Disclosure3
Full discourse4 posts
  • White Rabbitx@TheRabbitPy
    Disclosure

    🚨 Free Hotel SQLi CVSS: 9.8 Unauthenticated DB access through login bypass flaws in Free Hotel CMS. Enables data exfiltration of user records and full backend takeover without auth. https://nvd.nist.gov/vuln/detail/CVE-2026-4966

    Post summary

    The post announces CVE-2026-4966 as a high‑severity SQL injection flaw in Free Hotel CMS that permits unauthenticated database access, data exfiltration, and full backend takeover, but it provides no PoC or evidence of active exploitation.

    11020215
    434 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-4966 A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a ma… https://www.cve.org/CVERecord?id=CVE-2026-4966 ----- Traducción: CVE-2026-4966 Se … http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-4966, a newly disclosed vulnerability in Free Hotel Reservation System 1.0, noting a flaw in an unknown function within a specific admin file.

    0000043
    65 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-4966 A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a ma… https://www.cve.org/CVERecord?id=CVE-2026-4966

    Post summary

    A new CVE (2026-4966) affecting the Free Hotel Reservation System 1.0 has been identified, but no exploitation details, PoC, or patch information have been provided.

    00000231
    56.9K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4966 - itsourcecode Free Hotel Reservation System index.php sql injection Intel Report: https://ift.tt/poGOqXa

    Post summary

    The alert announces CVE‑2026‑4966 as a SQL injection in the Free Hotel Reservation System’s index.php, yet it provides no PoC, exploit, or mitigation details.

    0000039
    285 followersView on X

Explore more

Back to dashboard