PT-2026-23919

CVE-2026-3710

Published

2026-03-08

Updated

2026-03-08

Description by

CVSS 3.1

7.2

High

MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simple Flight Ticket Booking System version 1.0

Description A security issue exists in Simple Flight Ticket Booking System 1.0. The manipulation of the arguments flightno, airplaneid, departure, dtime, arrival, atime, ec, ep, bc, and bp in the file /Adminadd.php can lead to a SQL injection. Remote exploitation is possible. The exploit has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Owenw

Vendors

Affected products

Weakness enumeration

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers