CVE-2026-124581: itsourcecode Airline Reservation System manage_flight.php sql injection
A vulnerability was determined in itsourcecode Airline Reservation System 1.0. Affected is an unknown function of the file /admin/manageflight.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be performed remotely and does not require privileges or user interaction according to the supplied severity vector. Exploitation targets the ID argument handled by /admin/manage_flight.php.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and the record is flagged as having a proof of concept, increasing the likelihood that the issue may be used in attacks.
What security impact can successful exploitation have?
Successful SQL injection may affect confidentiality, integrity, and availability, each with a low impact rating in the provided vector.