CVE-2026-3708

Publication date

2026-03-08 05:02:17

Family

VulDB

State

PUBLISHED

Description

A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. The impacted element is an unknown function of the file /login.php. Performing a manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.