CVE-2026-7134
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability was identified in code-projects Online Lot Reservation System 1.0 affecting an unknown function of /edithousepic.php. Manipulation of the image argument leads to unrestricted upload. The attack can be launched remotely and the exploit is publicly available.
Risk Assessment
An attacker may upload arbitrary files (e.g., malicious scripts), potentially leading to remote code execution or server compromise.
Recommendation
Restrict access to /edithousepic.php, implement file upload validation and fixes; consider updating or retiring the vulnerable version.
Other vulnerabilities in Online Lot Reservation System
See all- CVE-2026-7133Medium
A vulnerability was determined in code-projects Online Lot Reservation System 1.0 affecting an unknown function of /activity.php. Manipulation of the directory argument causes unrestricted upload. The attack can be initiated remotely and the exploit has been publicly disclosed.
- CVE-2026-7132Medium
A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. The readfile function in /download.php allows path traversal via manipulation of the File argument. The attack can be initiated remotely and the exploit has been made public.
Original NVD description (English source)
A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of the file /edithousepic.php. Such manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS