Medium severity4.7NVD Advisory· Published Apr 27, 2026· Updated Apr 29, 2026

CVE-2026-7134

Description

A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of the file /edithousepic.php. Such manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

code-projects.orgnvd
github.com/zzk6th/cve/issues/4nvd
vuldb.com/submit/800983nvd
vuldb.com/vuln/359733nvd
vuldb.com/vuln/359733/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000