CVE-2026-3710: code-projects Simple Flight Ticket Booking System Adminadd.php sql injection
A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3710?
CVE-2026-3710 has been classified as a medium severity vulnerability due to its SQL injection risk.
How do I fix CVE-2026-3710?
To fix CVE-2026-3710, sanitize and validate all user inputs in the Adminadd.php file to prevent SQL injection.
What software is affected by CVE-2026-3710?
CVE-2026-3710 affects version 1.0 of the code-projects Simple Flight Ticket Booking System.
What type of vulnerability is CVE-2026-3710?
CVE-2026-3710 is an SQL injection vulnerability that allows attackers to manipulate database queries.
Can CVE-2026-3710 be exploited remotely?
Yes, CVE-2026-3710 can be exploited remotely if an attacker can send crafted requests to the affected Adminadd.php script.