CVE-2026-3723: code-projects Simple Flight Ticket Booking System Admindelete.php sql injection
A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /Admindelete.php. The manipulation of the argument flightno results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3723?
CVE-2026-3723 is a critical SQL injection vulnerability in the Simple Flight Ticket Booking System that could allow an attacker to manipulate database queries.
How do I fix CVE-2026-3723?
To fix CVE-2026-3723, sanitize and validate all user inputs in the Admindelete.php file, especially the flightno parameter, to prevent SQL injection.
Which versions of the product are affected by CVE-2026-3723?
CVE-2026-3723 affects version 1.0 of the code-projects Simple Flight Ticket Booking System.
What can an attacker achieve by exploiting CVE-2026-3723?
An attacker exploiting CVE-2026-3723 can execute arbitrary SQL queries, potentially leading to unauthorized data access or manipulation.
Is there a patch available for CVE-2026-3723?
As of now, there is no official patch available for CVE-2026-3723, so developers must implement preventive coding practices.