CVE-2026-3735Disclosure(carmelo / simple_flight_ticket_booking_system)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file SearchResultOneway.php. Such manipulation of the argument from leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

carmelo CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/6Justdododo6/CVE/issues/10

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

simple_flight_ticket_booking_system

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 3d ago at 2 mentions (2026-03-08); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

carmelo

Products

simple_flight_ticket_booking_system

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

360.0%

General

240.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	2	Disclosure2
2026-03-09	1	General1
2026-03-12	1	Disclosure1
2026-03-13	1	General1

Full discourse5 posts

CRAC Learning - Tech@cracbot209d
General
CVE-2026-3735 (CVSS:6.9, HIGH) is Analyzed. A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability ..https://nvd.nist.gov/vuln/detail/CVE-2026-3735 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post notes the discovery of CVE‑2026‑3735 with a CVSS score of 6.9 in Simple Flight Ticket Booking System 1.0 and links to the NVD entry, but offers no further technical, exploit, or mitigation details.
0000023
172 followersView on X
CRAC Learning - Tech@cracbot210d
Disclosure
CVE-2026-3735 (CVSS:6.9, HIGH) is Analyzed. A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability ..https://nvd.nist.gov/vuln/detail/CVE-2026-3735 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The statement announces CVE-2026-3735, a high‑severity vulnerability (CVSS 6.9) affecting Simple Flight Ticket Booking System 1.0, without providing PoC, exploit, or patch details.
0000017
172 followersView on X
RedPacket Security@RedPacketSec213d
General
CVE Alert: CVE-2026-3735 - code-projects - Simple Flight Ticket Booking System - https://www.redpacketsecurity.com/cve-alert-cve-2026-3735-code-projects-simple-flight-ticket-booking-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3735 #code-projects #simple-flight-ticket-booking-system
Post summary
The tweet merely announces a CVE alert for CVE-2026‑3735 without offering any technical, exploit, or patch information.
00000120
3.5K followersView on X
CVE@CVEnew213d
Disclosure
CVE-2026-3735 A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file SearchRe… https://www.cve.org/CVERecord?id=CVE-2026-3735
Post summary
A vulnerability (CVE-2026-3735) has been identified in the Simple Flight Ticket Booking System v1.0, affecting an unknown functionality in the SearchRe file, with a reference to the CVE record.
0000096
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds214d
Disclosure
CVE-2026-3735 SQL Injection in Simple Flight Ticket Booking System 1.0 via Searc... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3735 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
This tweet alerts about a SQL injection flaw (CVE-2026-3735) in Simple Flight Ticket Booking System 1.0, providing basic technical details but no PoC, exploit, or patch information.
0000039
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	carmelo	simple_flight_ticket_booking_system	1.0	-	-

Explore more

Back to dashboard carmelo CVEs simple_flight_ticket_booking_system vulnerabilities

What researchers are saying

CVE-2026-3735

CRAC Learning - Tech@cracbotGeneral

The post notes the discovery of CVE‑2026‑3735 with a CVSS score of 6.9 in Simple Flight Ticket Booking System 1.0 and links to the NVD entry, but offers no further technical, exploit, or mitigation details.

CRAC Learning - Tech@cracbotDisclosure

The statement announces CVE-2026-3735, a high‑severity vulnerability (CVSS 6.9) affecting Simple Flight Ticket Booking System 1.0, without providing PoC, exploit, or patch details.

RedPacket Security@RedPacketSecGeneral

The tweet merely announces a CVE alert for CVE-2026‑3735 without offering any technical, exploit, or patch information.

CVE@CVEnewDisclosure

A vulnerability (CVE-2026-3735) has been identified in the Simple Flight Ticket Booking System v1.0, affecting an unknown functionality in the SearchRe file, with a reference to the CVE record.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

This tweet alerts about a SQL injection flaw (CVE-2026-3735) in Simple Flight Ticket Booking System 1.0, providing basic technical details but no PoC, exploit, or patch information.