{"id":"CVE-2026-122191","kind":"vulnerability","aliases":["CVE-2026-122191"],"related":[],"title":"Airline Reservation System: SQL injection in admin booking page via ID","description":"A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown function of the file /admin/manage_booked.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.","summary":"The itsourcecode Airline Reservation System 1.0 admin page /admin/manage_booked.php does not properly handle the ID parameter, allowing SQL injection. An attacker can read or change database contents by sending crafted requests remotely, and a public exploit has been disclosed.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["airline-reservation-system","itsourcecode","other","php"],"not_affected_if":["admin-not-exposed"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T04:17:12+00:00","first_seen_at":"2026-11-05T04:31:48+00:00","triaged_at":"2026-11-05T04:33:38+00:00","updated_at":"2026-11-05T04:33:38+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-05T04:33:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Airline Reservation System: SQL injection in admin booking page via ID","impact":"high","summary":"The itsourcecode Airline Reservation System 1.0 admin page /admin/manage_booked.php does not properly handle the ID parameter, allowing SQL injection. An attacker can read or change database contents by sending crafted requests remotely, and a public exploit has been disclosed.","audience":"businesses","category":"other","nicknames":[],"who_cares":["php","airline-reservation-system","itsourcecode"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"database contents readable and modifiable by a remote attacker","analyst_note":"Check whether /admin/manage_booked.php requires authentication and whether the vendor or any maintainer has published a fix; sources only give the NVD entry.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["admin-not-exposed"],"who_is_affected":"Teams running the itsourcecode Airline Reservation System 1.0 web application with the admin area reachable over the network are exposed. The sources do not say whether authentication is required to reach the admin page, so treat any internet-reachable instance as at risk until checked.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000664,"input_tokens":4222,"output_tokens":483,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-122191':14A,17A '-2026':13A,16A '/admin/manage_booked.php':33B,82C '1.0':30B,73C 'admin':7A,31B 'affect':75C 'airlin':1A,19B,27B,70C 'airline-reservation-system':18B 'allow':41B 'argument':88C 'attack':45B,96C 'book':8A 'chang':49B 'content':51B 'craft':54B 'cve':12A,15A 'databas':50B 'determin':67C 'disclos':63B,106C 'execut':83C 'exploit':60B,102C 'file':81C 'function':78C 'handl':37B 'id':11A,39B,89C 'inject':5A,43B,94C 'itsourcecod':22B,26B,69C 'launch':99C 'lead':91C 'manipul':85C 'may':97C,108C 'page':9A,32B 'paramet':40B 'php':24B 'proper':36B 'public':59B,105C 'read':47B 'remot':56B,100C 'request':55B 'reserv':2A,20B,28B,71C 'send':53B 'sql':4A,42B,93C 'system':3A,21B,29B,72C 'unknown':77C 'util':110C 'via':10A 'vulner':65C","nicknames":[],"mitigations":[],"who_affected":"Teams running the itsourcecode Airline Reservation System 1.0 web application with the admin area reachable over the network are exposed. The sources do not say whether authentication is required to reach the admin page, so treat any internet-reachable instance as at risk until checked.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["airlinereservationsystem","itsourcecode","medium","other","php"],"campaign_type":null,"first_public_at":"2026-11-05T04:17:12+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122191","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122191","severity":null,"published_at":"2026-11-05T04:17:12+00:00","modified_at":"2026-11-05T04:17:12+00:00","first_seen_at":"2026-11-05T04:31:48+00:00","fetched_at":"2026-11-05T04:31:48+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}