| शीर्षक | code-projects Simple Flight Ticket Booking System 1.0 SQL Injection |
|---|
| विवरण | A SQL Injection vulnerability has been identified in Code-Projects Simple Flight Ticket Booking System v1.0 in the checkUser.php file.
The vulnerability exists in the username POST parameter, which is directly included in SQL queries without proper sanitization or use of prepared statements.
An attacker can manipulate the input to alter the structure of SQL queries executed by the application. |
|---|
| स्रोत | ⚠️ https://github.com/K1venn/cves/issues/1 |
|---|
| उपयोगकर्ता | k1ven (UID 98420) |
|---|
| सबमिशन | 21/05/2026 01:26 AM (5 महीनों पहले) |
|---|
| संयम | 07/06/2026 12:09 PM (17 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 369108 [code-projects Simple Flight Ticket Booking System 1.0 POST Parameter checkUser.php username SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|