CVE-2026-108937

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
5.3
MEDIUM
CVSS v2 Base Score
5.0
MEDIUM

Description

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now public and may be used.

Published
October 12, 2026 11:17 PM
Last Modified
October 12, 2026 11:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-200 CWE-538

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry