The Simple Flight Ticket Booking System 1.0 is vulnerable to unauthenticated SQL injection, posing a significant risk of unauthorized data exposure.

This is a SQL injection vulnerability (CWE-89) located in the Adminsearch.php file. An unauthenticated attacker can supply a malicious payload through the flightno GET parameter, which the application fails to sanitize before executing a database query.

Successful exploitation allows an attacker to bypass security controls and extract sensitive information from the backend database, including user credentials and flight records. With a CVSS score of 7.3, this high-severity vulnerability could lead to significant data breaches, loss of customer privacy, and compromise of the underlying server environment.

Immediate Action: As no official patch is currently available, administrators should restrict access to the /Adminsearch.php file or disable the affected module entirely if it is not business critical.

Proactive Monitoring: Monitor web server access logs for anomalous GET requests containing SQL syntax, such as UNION, SELECT, or SLEEP commands directed at the /Adminsearch.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the flightno parameter.

Public Exploit Available: Yes, a published proof-of-concept exists via the researcher's GitHub repository referenced in the CVE record.

Given the availability of public proof-of-concept code and the ease of remote exploitation, this vulnerability presents an urgent risk. Organizations using this software must implement immediate defensive measures, such as WAF filtering or access restrictions, until a vendor-supplied patch is released and verified. Prioritize the transition to a more secure booking platform if the vendor does not provide timely security updates.