PT-2026-23974 · Unknown · Simple Flight Ticket Booking System

Xuanyuesanshi · Publicado 2026-03-08 · Atualizado 2026-03-08 · CVE-2026-3763

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple Flight Ticket Booking System version 1.0

Description A cross site scripting issue exists in Simple Flight Ticket Booking System 1.0. The issue is located in the showhistory.php file, within an unknown function. The manipulation of this function can lead to cross site scripting. The exploit for this issue has been made public.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-3763

Produtos afetados

Simple Flight Ticket Booking System

Referências · 11

• 🔥 https://github.com/shenxianyuguitian/simple-flight-booking-XSS · Exploit
• https://code-projects.org · Nota
• https://vuldb.com/?id.349741 · Nota
• https://twitter.com/VulmonFeeds/status/2030731617996616147 · Publicação no Twitter
• https://vuldb.com/?ctiid.349741 · Nota
• https://t.me/CVEtracker/46834 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2030747836103770334 · Publicação no Twitter
• https://vuldb.com/?submit.768182 · Nota
• https://twitter.com/cyberbivash/status/2030739953513070924 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-3763 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-3763 · Aviso do Fabricante