Executive brief
The Simple Flight Ticket Booking System, a web application for managing airline reservations, contains a security flaw in its login and user verification process. An attacker can exploit this to bypass security controls, view sensitive database information, or modify records. This could lead to unauthorized access to customer data and disruption of the booking service.
Technical details
A SQL injection vulnerability exists in Code-Projects Simple Flight Ticket Booking System 1.0 within the checkUser.php file. The application fails to properly sanitize the 'Username' POST parameter before incorporating it into a database query, leading to a classic CWE-89 vulnerability. A remote, unauthenticated attacker can exploit this by sending specially crafted HTTP POST requests to manipulate SQL execution. This can be used to bypass authentication, extract sensitive data via time-based techniques, or modify database contents. A public proof-of-concept (PoC) using time-based sleep payloads has been disclosed.
Affected products
- Code-Projects Simple Flight Ticket Booking System 1.0
Timeline
- 2026-05-20: disclosed: Initial disclosure on GitHub by researcher K1venn
- 2026-06-08: advisory: NVD/VulDB advisory published