CVE-2026-3723 - Vulnerability Analysis

Overview

code-projects Simple Flight Ticket Booking System 1.0 contains a sql injection caused by manipulation of the "flightno" argument in /Admindelete.php, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data theft or modification.

Mitigation

Update to the latest version or apply patches that fix the SQL injection vulnerability.

References

• https://vuldb.com/?submit.766311
• https://vuldb.com/?submit.767272
• https://code-projects.org/
• https://github.com/Owen-YuanW/CVE/issues/6
• https://vuldb.com/?ctiid.349699
• https://vuldb.com/?id.349699

Social Media Activity(1 post)

Yazoul Alerts

@Matchbook3469

Mar 9, 2026

🔶 New security advisory: CVE-2026-3723 affects multiple systems. • Impact: Significant security breach potential • Risk: Unauthorized access or data exposure • Mitigation: Apply patches within 24-48 hours Full breakdown: https://www.yazoul.net/advisory/cve/cve-2026-3723 #Cybersecurity #PatchNow #InfoSecCommunity

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner