medium4.7
CVE-2026-3711
A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0.
Impact
A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0. Affected is an unknown function of the file /Adminupdate.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Carmelo | Simple Flight Ticket Booking System | Version 1.0 |