ГлавнаяУязвимости → CVE-2026-3705
7.3высокая

CVE-2026-3705

Описание

A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown processing of the file /Adminsearch.php. The manipulation of the argument flightno results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Затрагиваемое ПО
Carmelo Simple flight ticket booking system
CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Источники
https://code-projects.org/https://github.com/Owen-YuanW/CVE/issues/1https://vuldb.com/?ctiid.349651https://vuldb.com/?id.349651https://vuldb.com/?submit.765797https://vuldb.com/?submit.767262