A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0 and classified as critical. The impacted element is an unknown function of the file /login.php. Performing a manipulation of the argument Username results in sql injection.
This vulnerability was named CVE-2026-3708. The attack may be initiated remotely. In addition, an exploit is available.
