---
title: "carmelo simple flight ticket booking system vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/carmelo/simple-flight-ticket-booking-system
type: product
description: "carmelo simple flight ticket booking system has 9 published CVEs, 0 in CISA KEV and 9 with public exploits."
updated: 2026-03-08
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# carmelo simple flight ticket booking system vulnerabilities

Vendor: [carmelo](https://radicalnotion.ai/vendor/carmelo)

- **Published CVEs:** 9
- **In CISA KEV:** 0
- **With a public exploit:** 9
- **With a patch:** 0
- **Average CVSS:** 6.3
- **First CVE:** 2026-03-08
- **Latest CVE:** 2026-03-08

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 0 |
| Medium | 9 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 5 |
| [CWE-74](https://radicalnotion.ai/cwe/cwe-74) | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 3 |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2026 | 9 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| 1.0 | range | 9 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-3763 | code-projects Simple Flight Ticket Booking System showhistory.php cross site scripting | medium | 5.3 | No | Yes | No |
| CVE-2026-3736 | code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection | medium | 6.9 | No | Yes | No |
| CVE-2026-3735 | code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection | medium | 6.9 | No | Yes | No |
| CVE-2026-3723 | code-projects Simple Flight Ticket Booking System Admindelete.php sql injection | medium | 6.9 | No | Yes | No |
| CVE-2026-3711 | code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection | medium | 5.1 | No | Yes | No |
| CVE-2026-3710 | code-projects Simple Flight Ticket Booking System Adminadd.php sql injection | medium | 5.1 | No | Yes | No |
| CVE-2026-3709 | code-projects Simple Flight Ticket Booking System register.php sql injection | medium | 6.9 | No | Yes | No |
| CVE-2026-3708 | code-projects Simple Flight Ticket Booking System login.php sql injection | medium | 6.9 | No | Yes | No |
| CVE-2026-3705 | code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection | medium | 6.9 | No | Yes | No |

## Frequently asked questions

### How many CVEs does carmelo simple flight ticket booking system have?

carmelo simple flight ticket booking system has 9 published CVE records since 2026.

### How many carmelo simple flight ticket booking system CVEs are in CISA KEV?

None of carmelo simple flight ticket booking system's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for carmelo simple flight ticket booking system vulnerabilities?

Yes — 9 of carmelo simple flight ticket booking system's CVEs have a known public exploit.

### Which versions of carmelo simple flight ticket booking system are affected?

1 distinct carmelo simple flight ticket booking system version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in carmelo simple flight ticket booking system CVEs?

carmelo simple flight ticket booking system's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

### What is the average severity of carmelo simple flight ticket booking system CVEs?

The average CVSS base score across carmelo simple flight ticket booking system's scored CVEs is 6.3.

## Other products from this vendor

- [simple pizza ordering system](https://radicalnotion.ai/vendor/carmelo/simple-pizza-ordering-system) (18 CVEs)
- [church donation system](https://radicalnotion.ai/vendor/carmelo/church-donation-system) (14 CVEs)
- [intern membership management system](https://radicalnotion.ai/vendor/carmelo/intern-membership-management-system) (13 CVEs)
- [online event judging system](https://radicalnotion.ai/vendor/carmelo/online-event-judging-system) (10 CVEs)
- [simple food order system](https://radicalnotion.ai/vendor/carmelo/simple-food-order-system) (10 CVEs)
- [simple stock system](https://radicalnotion.ai/vendor/carmelo/simple-stock-system) (6 CVEs)
- [computer book store](https://radicalnotion.ai/vendor/carmelo/computer-book-store) (5 CVEs)
- [food ordering review system](https://radicalnotion.ai/vendor/carmelo/food-ordering-review-system) (5 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/carmelo/simple-flight-ticket-booking-system). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.