8 matches found
CVE-2026-3710 code-projects Simple Flight Ticket Booking System Adminadd.php sql injection
A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...
CVE-2026-3710: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...
Cross site request forgery (csrf)
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
CVE-2018-14963
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
CVE-2018-14963
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
CVE-2018-14963
The CVE-2018-14963 entry concerns zzcms 8.3 with a Cross-Site Request Forgery vulnerability exposed via the admin/adminadd.php?action=add URI. According to the provided metrics, the CVSS vectors indicate a network-based vulnerability with high impact to confidentiality, integrity, and availabilit...
PT-2018-12840
Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description The issue is related to a CSRF problem. It affects the admin/adminadd.php endpoint, specifically when the action parameter is set to add. Recommendations For zzcms version 8.3, consider implementing proper CSRF...