CVE-2026-7133
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability was determined in code-projects Online Lot Reservation System 1.0 affecting an unknown function of /activity.php. Manipulation of the directory argument causes unrestricted upload. The attack can be initiated remotely and the exploit has been publicly disclosed.
Risk Assessment
An attacker may upload arbitrary files (e.g., malicious scripts), potentially leading to remote code execution or server compromise.
Recommendation
Restrict access to /activity.php, implement file upload validation and fixes; consider updating or retiring the vulnerable version.
Other vulnerabilities in Online Lot Reservation System
See all- CVE-2026-7134Medium
A vulnerability was identified in code-projects Online Lot Reservation System 1.0 affecting an unknown function of /edithousepic.php. Manipulation of the image argument leads to unrestricted upload. The attack can be launched remotely and the exploit is publicly available.
- CVE-2026-7132Medium
A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. The readfile function in /download.php allows path traversal via manipulation of the File argument. The attack can be initiated remotely and the exploit has been made public.
Original NVD description (English source)
A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of the file /activity.php. This manipulation of the argument directory causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS