PT-2026-46837 · Sourcecodester · Ship Ferry Ticket Reservation System

Hemantra J Bhati + 1 · CVE-2026-10877 · Published 2026-06-04 · Updated 2026-06-21

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Ship Ferry Ticket Reservation System versions prior to 1.1

Description An issue exists in the Admin Login component within the '/admin/login.php' endpoint. Remote manipulation of the Username argument allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution.

Recommendations Update the system to a version later than 1.0. As a temporary workaround, restrict access to the '/admin/login.php' endpoint to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-10877

Affected Products

Ship Ferry Ticket Reservation System

References · 10

• 🔥 https://medium.com/@hemantrajbhati5555/sql-injection-in-authentication-mechanism-leads-to-authentication-bypass-65177ce7a41c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10877 · Security Note
• https://twitter.com/CVEnew/status/2062817218531119114 · Twitter Post
• https://vuldb.com/vuln/368367 · Note
• https://t.me/cveNotify/166110 · Telegram Post
• https://vuldb.com/cve/CVE-2026-10877 · Note
• https://vuldb.com/vuln/368367/cti · Note
• https://sourcecodester.com · Note
• https://vuldb.com/submit/831871 · Note
• https://twitter.com/vuldb/status/2068754717535314254 · Twitter Post