CVE-2026-3746Disclosure(oretnom23 / simple_responsive_tourism_website)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

oretnom23 CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

simple_responsive_tourism_website

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-03-09); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

oretnom23

Products

simple_responsive_tourism_website

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	1	Disclosure1
2026-03-09	2	Disclosure2
2026-03-12	1	Disclosure1
2026-03-13	1	General1

Full discourse5 posts

CRAC Learning - Tech@cracbot212d
General
CVE-2026-3746 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability i..https://nvd.nist.gov/vuln/detail/CVE-2026-3746 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-3746 with its CVSS score and affected version of SourceCodester Simple Responsive Tourism Website, but provides no PoC, exploit details, active exploitation claim, or remediation information.
0000019
172 followersView on X
CRAC Learning - Tech@cracbot213d
Disclosure
CVE-2026-3746 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability i..https://nvd.nist.gov/vuln/detail/CVE-2026-3746 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet announces the discovery of CVE-2026-3746 in SourceCodester Simple Responsive Tourism Website 1.0, noting a CVSS score of 6.9 and high severity, but provides no PoC, exploit, patch, or evidence of active exploitation.
0000016
172 followersView on X
DailyCVE@dailycve215d
Disclosure
🟠 SourceCodester Simple Responsive Tourism Website SQL Injection #CVE-2026-3746 (Medium) https://dailycve.com/sourcecodester-simple-responsive-tourism-website-sql-injection-cve-2026-3746-medium/
Post summary
The text announces a medium‑scored SQL Injection vulnerability (CVE‑2026‑3746) in SourceCodester’s Simple Responsive Tourism Website, offering basic technical info without any PoC, exploit details, or patch information.
0000023
166 followersView on X
RedPacket Security@RedPacketSec216d
Disclosure
CVE Alert: CVE-2026-3746 - SourceCodester - Simple Responsive Tourism Website - https://www.redpacketsecurity.com/cve-alert-cve-2026-3746-sourcecodester-simple-responsive-tourism-website/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3746 #sourcecodester #simple-responsive-tourism-website
Post summary
The post announces the CVE‑2026‑3746 vulnerability affecting the SourceCodester Simple Responsive Tourism Website, but it provides no PoC, exploit, patch, or technical details.
0000096
3.5K followersView on X
CVE@CVEnew216d
Disclosure
CVE-2026-3746 A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/… https://www.cve.org/CVERecord?id=CVE-2026-3746
Post summary
A new CVE (2026-3746) has been announced for SourceCodester Simple Responsive Tourism Website 1.0, but the post offers no further technical information beyond an unspecified functionality issue.
0000085
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	oretnom23	simple_responsive_tourism_website	1.0	-	-

Explore more

Back to dashboard oretnom23 CVEs simple_responsive_tourism_website vulnerabilities

What researchers are saying

CVE-2026-3746

CRAC Learning - Tech@cracbotGeneral

The post references CVE-2026-3746 with its CVSS score and affected version of SourceCodester Simple Responsive Tourism Website, but provides no PoC, exploit details, active exploitation claim, or remediation information.

CRAC Learning - Tech@cracbotDisclosure

The tweet announces the discovery of CVE-2026-3746 in SourceCodester Simple Responsive Tourism Website 1.0, noting a CVSS score of 6.9 and high severity, but provides no PoC, exploit, patch, or evidence of active exploitation.

DailyCVE@dailycveDisclosure

The text announces a medium‑scored SQL Injection vulnerability (CVE‑2026‑3746) in SourceCodester’s Simple Responsive Tourism Website, offering basic technical info without any PoC, exploit details, or patch information.

RedPacket Security@RedPacketSecDisclosure

The post announces the CVE‑2026‑3746 vulnerability affecting the SourceCodester Simple Responsive Tourism Website, but it provides no PoC, exploit, patch, or technical details.

CVE@CVEnewDisclosure

A new CVE (2026-3746) has been announced for SourceCodester Simple Responsive Tourism Website 1.0, but the post offers no further technical information beyond an unspecified functionality issue.