CVE-2026-3800 | SourceCodester/janobe Resort Reservation System 1.0 controller.php?action=add doInsert image unrestricted upload

A vulnerability was found in SourceCodester/janobe Resort Reservation System 1.0 and classified as critical. Affected is the function doInsert of the file /controller.php?action=add. Such manipulation of the argument image leads to unrestricted upload.

This vulnerability is documented as CVE-2026-3800. The attack can be executed remotely. Additionally, an exploit exists.