{"id":"CVE-2026-124581","kind":"vulnerability","aliases":["CVE-2026-124581"],"related":[],"title":"Airline Reservation System: SQL injection in admin flight management page","description":"A vulnerability was determined in itsourcecode Airline Reservation System 1.0. Affected is an unknown function of the file /admin/manage_flight.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.","summary":"itsourcecode Airline Reservation System 1.0 has an SQL injection flaw in the ID parameter of /admin/manage_flight.php. A remote attacker can manipulate that input to run arbitrary database queries, and a public exploit has been disclosed.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"itsourcecode Airline Reservation System","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["airline-reservation-system","other","php","self-hosted","sql"],"not_affected_if":[],"how_to_check":"Check whether you run itsourcecode Airline Reservation System 1.0 (a PHP project): look for /admin/manage_flight.php in the web root and whether it is reachable without logging in. No fixed version is published in the sources read.","fix":null,"status":"open","published_at":"2026-11-09T09:16:58+00:00","first_seen_at":"2026-11-09T09:25:32+00:00","triaged_at":"2026-11-09T09:26:13+00:00","updated_at":"2026-11-09T09:27:31+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-09T09:26:13Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Airline Reservation System: SQL injection in admin flight management page","impact":"high","summary":"itsourcecode Airline Reservation System 1.0 has an SQL injection flaw in the ID parameter of /admin/manage_flight.php. A remote attacker can manipulate that input to run arbitrary database queries, and a public exploit has been disclosed.","audience":"businesses","category":"other","nicknames":[],"who_cares":["airline-reservation-system","php","sql","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"database contents readable or modified by a remote attacker","analyst_note":"Confirm whether /admin/manage_flight.php requires authentication and find the vendor or project page for a fixed version; the sources give neither.","how_to_check":"- unknown","plain_action":"","product_name":"itsourcecode Airline Reservation System","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running the itsourcecode Airline Reservation System 1.0 web application, where the admin flight management page is reachable. The sources do not say whether authentication is required to reach that page, so the exposure depends on how the admin area is deployed.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000699,"input_tokens":4549,"output_tokens":488,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm whether /admin/manage_flight.php requires authentication and find the vendor or project page for a fixed version; the sources give neither.","search":"'-124581':13A,16A '-2026':12A,15A '/admin/manage_flight.php':46B,84C '1.0':35B,75C 'admin':7A 'affect':76C 'airlin':1A,22B,32B,72C 'airline':18A 'airline-reservation-system':21B 'arbitrari':56B 'argument':89C 'attack':49B,95C 'carri':100C 'caus':91C 'cve':11A,14A 'databas':57B 'determin':69C 'disclos':65B,108C 'exploit':62B,104C 'file':83C 'flaw':40B 'flight':8A 'function':80C 'host':29B 'id':43B,90C 'inject':5A,39B,93C 'input':53B 'itsourcecod':31B,71C 'itsourcecode':17A 'manag':9A 'manipul':51B,86C 'may':110C 'page':10A 'paramet':44B 'php':26B 'possibl':97C 'public':61B,107C 'queri':58B 'remot':48B,102C 'reserv':2A,23B,33B,73C 'reservation':19A 'run':55B 'self':28B 'self-host':27B 'sql':4A,30B,38B,92C 'system':3A,20A,24B,34B,74C 'unknown':79C 'util':112C 'vulner':67C","nicknames":[],"mitigations":[],"who_affected":"Organizations running the itsourcecode Airline Reservation System 1.0 web application, where the admin flight management page is reachable. The sources do not say whether authentication is required to reach that page, so the exposure depends on how the admin area is deployed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["airlinereservationsystem","itsourcecodeairlinereservationsystem"],"ptokens":["airline","itsourcecode","reservation","system"],"labels":["airlinereservationsystem","high","other","php","selfhosted","sql","vendor"],"campaign_type":null,"search_a":"'-124581':13A,16A '-2026':12A,15A 'admin':7A 'airlin':1A 'airline':18A 'cve':11A,14A 'flight':8A 'inject':5A 'itsourcecode':17A 'manag':9A 'page':10A 'reserv':2A 'reservation':19A 'sql':4A 'system':3A,20A","search_b":"'/admin/manage_flight.php':46B '1.0':35B 'airlin':22B,32B 'airline-reservation-system':21B 'arbitrari':56B 'attack':49B 'databas':57B 'disclos':65B 'exploit':62B 'flaw':40B 'host':29B 'id':43B 'inject':39B 'input':53B 'itsourcecod':31B 'manipul':51B 'paramet':44B 'php':26B 'public':61B 'queri':58B 'remot':48B 'reserv':23B,33B 'run':55B 'self':28B 'self-host':27B 'sql':30B,38B 'system':24B,34B","search_c":"'/admin/manage_flight.php':84C '1.0':75C 'affect':76C 'airlin':72C 'argument':89C 'attack':95C 'carri':100C 'caus':91C 'determin':69C 'disclos':108C 'exploit':104C 'file':83C 'function':80C 'id':90C 'inject':93C 'itsourcecod':71C 'manipul':86C 'may':110C 'possibl':97C 'public':107C 'remot':102C 'reserv':73C 'sql':92C 'system':74C 'unknown':79C 'util':112C 'vulner':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T09:16:58+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124581","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124581","severity":null,"published_at":"2026-11-09T09:16:58+00:00","modified_at":"2026-11-09T09:16:58+00:00","first_seen_at":"2026-11-09T09:25:32+00:00","fetched_at":"2026-11-09T09:25:32+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-124581:2264","url":null,"severity":null,"published_at":"2026-11-09T09:27:31+00:00","modified_at":"2026-11-09T09:27:31+00:00","first_seen_at":"2026-11-09T09:27:31+00:00","fetched_at":"2026-11-09T09:27:31+00:00","note":"Search credits exhausted (web-cli 402) and NVD page fetch returned no content; no vendor/maintainer page found. itsourcecode is a free-source-code site, likely no vendor patch. Auth requirement for /admin/manage_flight.php unconfirmed (CVSS vector PR:N suggests none, per VulDB CNA only). Nothing verified. Revisit when search works."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}