The Simple Flight Ticket Booking System version 1.0 is vulnerable to unauthenticated SQL injection, which could allow a remote attacker to compromise the underlying database.

This is a SQL injection vulnerability (CWE-89) located in the SearchResultRoundtrip.php file. The application fails to properly sanitize the from parameter before including it in SQL queries, allowing an unauthenticated attacker to manipulate database operations.

Successful exploitation allows an attacker to gain unauthorized access to the application database, potentially leading to sensitive data leakage, data modification, or complete system compromise. Given the CVSS score of 7.3, this represents a significant security risk, as the vulnerability is remotely exploitable without authentication and could lead to total loss of confidentiality and integrity within the booking system.

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the application via network-level controls until code-level remediation is implemented.

Proactive Monitoring: Monitor web server logs for suspicious POST requests to SearchResultRoundtrip.php containing SQL syntax characters, such as single quotes, RLIKE keywords, or sleep commands.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns specifically targeting the from parameter.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue referenced by the researcher.

The severity of this vulnerability, combined with the availability of public proof-of-concept material, necessitates immediate defensive action. Organizations utilizing this system must prioritize restricting external access to the vulnerable endpoint and should actively seek to replace the vulnerable component or implement the recommended prepared statements to prevent further exposure.