Medium severity5.3NVD Advisory· Published Apr 27, 2026· Updated Apr 27, 2026

CVE-2026-7132

Description

A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the function readfile of the file /download.php. The manipulation of the argument File results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Code Projects/Online Lot Reservation Systemllm-fuzzy
Range: <=1.0

Patches

Vulnerability mechanics

References

code-projects.orgnvd
github.com/zzk6th/cve/issues/2nvd
vuldb.com/submit/800979nvd
vuldb.com/vuln/359731nvd
vuldb.com/vuln/359731/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000