CVE-2026-108937: code-projects Online Ticket Reservation System medallion.sql file information disclosure
A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of code-projects Online Ticket Reservation System 1.0 are exposed if the /database/medallion.sql file can be reached remotely. The issue can be attacked over the network.
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates that exploitation requires neither privileges nor user interaction, and that attack complexity is low.
What can an attacker obtain?
The reported impact is exposure of file and directory information. The supplied impact vector rates confidentiality impact as low and reports no integrity or availability impact.
Is public exploit code available?
Yes. The vulnerability information states that an exploit is public and may be used.