Xenoecho

Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A SQL injection issue exists in Campcodes Online Flight Booking Management System version 1.0. The vulnerability is located in an unknown functionality of the `/admin/ajax.php?action=login` file within the Login component. Manipulation of the `Username` argument can lead to a successful SQL injection attack, which can be launched remotely. The exploit has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A SQL injection issue exists in Campcodes Online Flight Booking Management System version 1.0. Manipulation of the `departure airport id` argument in the /flights.php file can lead to SQL injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider restricting access to the /flights.php file until a fix is available. Sanitize the `departure airport id` argument to prevent SQL injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A vulnerability exists in Campcodes Online Flight Booking Management System 1.0, specifically within an unknown functionality of the `/admin/save airlines.php` file. Manipulation of the `ID` argument results in a SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed and may be used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.