CVE-2026-36938: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/viewroom.php...