CVE-2026-3705General(carmelo / simple_flight_ticket_booking_system)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown processing of the file /Adminsearch.php. The manipulation of the argument flightno results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

carmelo CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Owen-YuanW/CVE/issues/1

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

simple_flight_ticket_booking_system

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
General: 4 classified signals
Disclosure: 1 classified signal
Peaked 2d ago at 3 mentions (2026-03-08); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

carmelo

Products

simple_flight_ticket_booking_system

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

General

480.0%

Disclosure

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	3	General3
2026-03-12	1	General1
2026-03-13	1	Disclosure1

Full discourse5 posts

Vulmon Vulnerability Feed@VulmonFeeds214d
General
CVE-2026-3705 SQL Injection in Simple Flight Ticket Booking System 1.0 v... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3705 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces CVE-2026-3705, describing it as an SQL injection in the Simple Flight Ticket Booking System 1.0, and links to a vulnerability detail page, but does not provide any PoC, exploit, patch, or evidence of active exploitation.
0001052
4.0K followersView on X
RedPacket Security@RedPacketSec214d
General
CVE Alert: CVE-2026-3705 - code-projects - Simple Flight Ticket Booking System - https://www.redpacketsecurity.com/cve-alert-cve-2026-3705-code-projects-simple-flight-ticket-booking-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3705 #code-projects #simple-flight-ticket-booking-system
Post summary
The tweet merely points to a CVE alert link for CVE-2026-3705 in Simple Flight Ticket Booking System, without providing technical, exploit, or mitigation details.
00010119
3.5K followersView on X
CRAC Learning - Tech@cracbot209d
Disclosure
CVE-2026-3705 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown proc..https://nvd.nist.gov/vuln/detail/CVE-2026-3705 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A high‑severity vulnerability (CVE‑2026‑3705) affecting the Simple Flight Ticket Booking System 1.0 has been identified, with basic technical data and an NVD reference.
0000027
172 followersView on X
CRAC Learning - Tech@cracbot210d
General
CVE-2026-3705 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown proc..https://nvd.nist.gov/vuln/detail/CVE-2026-3705 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A brief notice announces CVE-2026-3705, providing its CVSS score and the affected software, with a link to the NVD entry but no further technical or actionable details.
0000019
172 followersView on X
CVE@CVEnew213d
General
CVE-2026-3705 A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown processing of the file /Adminsearch.php. The manipul… https://www.cve.org/CVERecord?id=CVE-2026-3705
Post summary
The text reports the existence of CVE-2026-3705 in a Simple Flight Ticket Booking System but provides only minimal contextual detail and no actionable information.
00000159
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	carmelo	simple_flight_ticket_booking_system	1.0	-	-

Explore more

Back to dashboard carmelo CVEs simple_flight_ticket_booking_system vulnerabilities

What researchers are saying

CVE-2026-3705

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The tweet announces CVE-2026-3705, describing it as an SQL injection in the Simple Flight Ticket Booking System 1.0, and links to a vulnerability detail page, but does not provide any PoC, exploit, patch, or evidence of active exploitation.

RedPacket Security@RedPacketSecGeneral

The tweet merely points to a CVE alert link for CVE-2026-3705 in Simple Flight Ticket Booking System, without providing technical, exploit, or mitigation details.

CRAC Learning - Tech@cracbotDisclosure

A high‑severity vulnerability (CVE‑2026‑3705) affecting the Simple Flight Ticket Booking System 1.0 has been identified, with basic technical data and an NVD reference.

CRAC Learning - Tech@cracbotGeneral

A brief notice announces CVE-2026-3705, providing its CVSS score and the affected software, with a link to the NVD entry but no further technical or actionable details.

CVE@CVEnewGeneral

The text reports the existence of CVE-2026-3705 in a Simple Flight Ticket Booking System but provides only minimal contextual detail and no actionable information.