Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3710 A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The man… https://www.cve.org/CVERecord?id=CVE-2026-3710
Post summary
A new vulnerability (CVE-2026-3710) has been reported for Simple Flight Ticket Booking System 1.0, affecting an unspecified function in Adminadd.php, with a link to the CVE record.
CVE-2026-3710 SQL Injection in Simple Flight Ticket Booking System 1.0 via Multiple Arguments https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3710
Post summary
The post announces CVE-2026-3710 as a SQL injection vulnerability in the Simple Flight Ticket Booking System 1.0, providing minimal technical details but no PoC, exploitation, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | carmelo | simple_flight_ticket_booking_system | 1.0 | - | - |