{"id":"CVE-2026-129443","kind":"vulnerability","aliases":["CVE-2026-129443"],"related":[],"title":"Airline Reservation System: SQL injection in admin user management page","description":"A vulnerability was determined in itsourcecode Airline Reservation System 1.0. The impacted element is an unknown function of the file /admin/manage_user.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.","summary":"The itsourcecode Airline Reservation System 1.0 admin page /admin/manage_user.php does not sanitize the ID parameter, allowing SQL injection. An attacker who can reach the page can read or change the application's database.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["airline-reservation-system","other","php","self-hosted"],"not_affected_if":["other-application"],"how_to_check":"- Check whether the deployment includes the file `/admin/manage_user.php`\n- Review the code that builds SQL queries from the `ID` parameter in that file","fix":null,"status":"open","published_at":"2026-11-15T08:17:21+00:00","first_seen_at":"2026-11-15T08:35:24+00:00","triaged_at":"2026-11-15T08:36:44+00:00","updated_at":"2026-11-15T08:36:44+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-15T08:36:44Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Airline Reservation System: SQL injection in admin user management page","impact":"high","summary":"The itsourcecode Airline Reservation System 1.0 admin page /admin/manage_user.php does not sanitize the ID parameter, allowing SQL injection. An attacker who can reach the page can read or change the application's database.","audience":"businesses","category":"other","nicknames":[],"who_cares":["airline-reservation-system","php","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"database contents readable and modifiable by remote attacker","analyst_note":"Confirm whether the admin page requires login and whether a fixed version or patch exists; the sources give no fix or product ranges.","how_to_check":"- Check whether the deployment includes the file `/admin/manage_user.php`\n- Review the code that builds SQL queries from the `ID` parameter in that file\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["other-application"],"who_is_affected":"Any deployment of itsourcecode Airline Reservation System 1.0 that exposes the admin user management page is exposed. The sources do not say whether authentication is required to reach that page. Installations that do not run this application can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.0007,"input_tokens":4551,"output_tokens":489,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-129443':13A,16A '-2026':12A,15A '/admin/manage_user.php':34B,79C '1.0':31B,68C 'admin':7A,32B 'airlin':1A,18B,28B,65C 'airline-reservation-system':17B 'allow':41B 'applic':56B 'argument':84C 'attack':45B,93C 'caus':86C 'chang':54B 'cve':11A,14A 'databas':58B 'determin':62C 'disclos':101C 'element':71C 'exploit':90C,97C 'file':78C 'function':75C 'host':25B 'id':39B,85C 'impact':70C 'inject':5A,43B,88C 'itsourcecod':27B,64C 'manag':9A 'manipul':81C 'may':103C 'page':10A,33B,50B 'paramet':40B 'php':22B 'possibl':95C 'public':100C 'reach':48B 'read':52B 'remot':89C 'reserv':2A,19B,29B,66C 'sanit':37B 'self':24B 'self-host':23B 'sql':4A,42B,87C 'system':3A,20B,30B,67C 'unknown':74C 'user':8A 'util':105C 'vulner':60C","nicknames":[],"mitigations":[],"who_affected":"Any deployment of itsourcecode Airline Reservation System 1.0 that exposes the admin user management page is exposed. The sources do not say whether authentication is required to reach that page. Installations that do not run this application can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["airlinereservationsystem","medium","other","php","selfhosted"],"campaign_type":null,"search_a":"'-129443':13A,16A '-2026':12A,15A 'admin':7A 'airlin':1A 'cve':11A,14A 'inject':5A 'manag':9A 'page':10A 'reserv':2A 'sql':4A 'system':3A 'user':8A","search_b":"'/admin/manage_user.php':34B '1.0':31B 'admin':32B 'airlin':18B,28B 'airline-reservation-system':17B 'allow':41B 'applic':56B 'attack':45B 'chang':54B 'databas':58B 'host':25B 'id':39B 'inject':43B 'itsourcecod':27B 'page':33B,50B 'paramet':40B 'php':22B 'reach':48B 'read':52B 'reserv':19B,29B 'sanit':37B 'self':24B 'self-host':23B 'sql':42B 'system':20B,30B","search_c":"'/admin/manage_user.php':79C '1.0':68C 'airlin':65C 'argument':84C 'attack':93C 'caus':86C 'determin':62C 'disclos':101C 'element':71C 'exploit':90C,97C 'file':78C 'function':75C 'id':85C 'impact':70C 'inject':88C 'itsourcecod':64C 'manipul':81C 'may':103C 'possibl':95C 'public':100C 'remot':89C 'reserv':66C 'sql':87C 'system':67C 'unknown':74C 'util':105C 'vulner':60C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-15T08:17:21+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-129443","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-129443","severity":null,"published_at":"2026-11-15T08:17:21+00:00","modified_at":"2026-11-15T08:17:21+00:00","first_seen_at":"2026-11-15T08:35:24+00:00","fetched_at":"2026-11-15T08:35:24+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}