5 matches found
CVE-2026-3710 code-projects Simple Flight Ticket Booking System Adminadd.php sql injection
A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...
Cross site request forgery (csrf)
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
CVE-2018-14963
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI...
CVE-2018-14963
The CVE-2018-14963 entry concerns zzcms 8.3 with a Cross-Site Request Forgery vulnerability exposed via the admin/adminadd.php?action=add URI. According to the provided metrics, the CVSS vectors indicate a network-based vulnerability with high impact to confidentiality, integrity, and availabilit...
