CVE-2025-8957 in Online Flight Booking Management System

Résumé

par MITRE • 14/08/2025

A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departure_airport_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsable: VulDB
• Divulgation: 14/08/2025
• Modérer: accepté
• Entrée: VDB-319926
• CPE: prêt
• CWE: CWE-89 (confirmé)
• Exploitation: Télécharger
• CVSS: 9.8 (NVD)
• EPSS: 0.00403
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-8957
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-8957
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-8957/