CVE-2025-8957: Campcodes Online Flight Booking Management System flights.php sql injection
A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departureairportid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8957?
CVE-2025-8957 is classified as a high severity vulnerability due to its potential for SQL injection leading to remote exploitation.
How do I fix CVE-2025-8957?
To fix CVE-2025-8957, sanitize and validate user input for the departure_airport_id parameter in the /flights.php file to prevent SQL injection.
What systems are affected by CVE-2025-8957?
CVE-2025-8957 affects the Campcodes Online Flight Booking Management System 1.0.
What type of attack can be executed through CVE-2025-8957?
CVE-2025-8957 allows for remote SQL injection attacks via manipulation of the departure_airport_id argument.
Is there a public exploit for CVE-2025-8957?
Yes, there are known exploits for CVE-2025-8957 that leverage SQL injection vulnerabilities in the affected system.