CVE-2026-3708

A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. The impacted element is an unknown function of the file /login.php. Performing a manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

• CWE-74
• CWE-89
• CWE-89

• https://code-projects.org/Product
• https://github.com/Owen-YuanW/CVE/issues/2Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.349654Permissions Required, VDB Entry
• https://vuldb.com/?id.349654Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.766138Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.767290Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.768181Third Party Advisory, VDB Entry

Published

Mar 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-37069Absolute Path Disclosure in /vfm-admin/assets/zipstream/gran…5.3
• CVE-2026-3707A vulnerability was identified in MrNanko webp4j up to 1.3.x…5.3
• CVE-2026-37070Incorrect access control in /vfm-admin/ajax/streamvid.php in…6.5
• CVE-2026-37071Arbitrary File Rename Leading to Privilege Escalation in Act…9.8
• CVE-2026-37072Veno File Manager Project Veno File Manager Project 4.4.9 is…9.8
• CVE-2026-37073Incorrect access control in /vfm-admin/ajax/sendfiles.php in…5.3
• CVE-2026-3709A weakness has been identified in code-projects Simple Fligh…9.8
• CVE-2026-3710A security vulnerability has been detected in code-projects …7.2
• CVE-2026-37100An issue in the Bluetooth Low Energy (BLE) control interface…6.5
• CVE-2026-37106An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a r…9.8
• CVE-2026-3711A vulnerability was detected in code-projects Simple Flight …7.2
• CVE-2026-3713A flaw has been found in pnggroup libpng up to 1.6.55. Affec…5.3