CVE-2026-3705: code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection
A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown processing of the file /Adminsearch.php. The manipulation of the argument flightno results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3705?
CVE-2026-3705 is classified as a critical vulnerability due to its potential for SQL injection attacks that could compromise the database.
How do I fix CVE-2026-3705?
To fix CVE-2026-3705, sanitize input parameters in the Adminsearch.php file to prevent SQL injection by using prepared statements or parameterized queries.
What impacts does CVE-2026-3705 have on system security?
CVE-2026-3705 can lead to unauthorized access or manipulation of the database, causing data breach or loss.
Is CVE-2026-3705 easy to exploit?
Yes, CVE-2026-3705 can be easily exploited by attackers who can manipulate the flightno parameter during input.
Which version of Simple Flight Ticket Booking System is affected by CVE-2026-3705?
CVE-2026-3705 affects version 1.0 of the Simple Flight Ticket Booking System.