CVE-2025-8957

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departure_airport_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Online Flight Booking Management System	1.0

References

https://vuldb.com/?ctiid.319926Permissions Required, VDB Entry
https://vuldb.com/?id.319926Third Party Advisory, VDB Entry
https://vuldb.com/?submit.627840Third Party Advisory, VDB Entry
https://www.campcodes.com/Product
https://www.yuque.com/yuqueyonghuvrsrwv/dhlxlu/xsngklzdixvub9si#vulnerability-details-and-pocBroken Link
https://www.yuque.com/yuqueyonghuvrsrwv/dhlxlu/xsngklzdixvub9si?singleDocPermissions Required

Timeline

Published: Aug 14, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-89588.8A vulnerability was identified in Tenda TX3 16.03.13.11_multi_TDE01. Affected by this vulnerability is an unknown functionality of the file CVE-2025-89597.5HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the CVE-2025-89609.8A vulnerability has been found in Campcodes Online Flight Booking Management System 1.0. Affected by this issue is some unknown functionalit CVE-2025-89613.3A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing CVE-2025-89627.8A vulnerability was found in code-projects Hostel Management System 1.0. Affected by this vulnerability is an unknown functionality of the f CVE-2025-89639.8A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/o CVE-2025-89647.8A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of CVE-2025-89658.8A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin CVE-2025-89669.8A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the fi CVE-2025-89679.8A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /ad CVE-2025-89689.8A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown fu CVE-2025-89699.8A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown function