CVE-2026-3710

CVE-2026-3710 affects the code-projects Simple Flight Ticket Booking System 1.0 . The vulnerability is in the file /Adminadd.php , where manipulating parameters flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to SQL injection . Reports indicate remote exploitation is possible ...

CVE-2026-3710 code-projects Simple Flight Ticket Booking System Adminadd.php sql injection

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...

PT-2022-9918 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: JIZHI CMS version 1.9.4 Description: A CSRF issue allows adding an admin account via the index or the "/admin.php/Admin/adminadd.html" API endpoint. Recommendations: For JIZHI CMS version 1.9.4, update to a newer version that contains a fix f...

CVE-2019-17593

JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator...

waimai Super Cms Cross-Site Request Forgery Vulnerability

waimai Super Cms is a professional takeaway ordering system for restaurants, hotels, takeaway platforms, patisseries, seafood stores. A cross-site request forgery vulnerability exists in waimai Super Cms 20150505. The vulnerability can be exploited to add an administrator account via...

CVE-2018-14014

In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd...