CVE-2026-13553 | itsourcecode Online Hotel Management System 1.0 controller.php?action=add image unrestricted upload

June 28, 2026 Yanac

A vulnerability was found in itsourcecode Online Hotel Management System 1.0 and classified as critical. Affected is an unknown function of the file /admin/mod_amenities/controller.php?action=add. Executing a manipulation of the argument image can lead to unrestricted upload.

This vulnerability is registered as CVE-2026-13553. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More