CVE-2026-3709 - Vulnerability Analysis

Overview

code-projects Simple Flight Ticket Booking System 1.0 contains a sql injection caused by manipulation of the "Username" argument in /register.php, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version or apply patches to fix the SQL injection vulnerability.

References

• https://vuldb.com/?ctiid.349655
• https://vuldb.com/?id.349655
• https://vuldb.com/?submit.766142
• https://vuldb.com/?submit.767883
• https://code-projects.org/
• https://github.com/Owen-YuanW/CVE/issues/3

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner