4.3Mittel
CVE-2026-3763code-projects Simple Flight Ticket Booking System showhistory.php cross site scripting
Beschreibung
A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown function of the file showhistory.php. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| carmelo | simple flight ticket booking system | 1.0 | |
| code-projects | Simple Flight Ticket Booking System | 1.0 |
Referenzen und Patches
- VDB-349741 | code-projects Simple Flight Ticket Booking System showhistory.php cross site scripting vdb-entryThird Party AdvisoryVDB Entry
- VDB-349741 | CTI Indicators (IOB, IOC, TTP, IOA) signatureVDB Entry
- Submit #768182 | code-projects simple flight booking system published February 14, 2026 Cross Site Scripting third-party-advisoryThird Party AdvisoryVDB Entry
- https://github.com/shenxianyuguitian/simple-flight-booking-XSS exploitExploitThird Party Advisory
- https://code-projects.org/ productProduct
CPE-Treffer (NVD) (1)
cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*