Dashboard / CVE-2024-3347

CVE-2024-3347

HIGH
MEDIUM Priority: 0.06 BB Relevance: 75/100
Published: 2024-04-05 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: Low
A: Low

Description

A vulnerability was found in SourceCodester Airline Ticket Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file activate_jet_details_form_handler.php. The manipulation of the argument jet_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259451.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
SourceCodester Airline Ticket Reservation System 1.0
SourceCodester Airline Ticket Reservation System 1.0

References & Advisories (4)

https://vuldb.com/?id.259451
vdb-entry technical-description
https://vuldb.com/?submit.310184
third-party-advisory
https://vuldb.com/?ctiid.259451
signature permissions-required

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS — Exploitation Probability

0.86%
Raw Score 0.008620
Percentile 59.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00862
2026-11-13
0.00862
2026-11-12
0.00862
2026-11-10
0.00862
2026-11-09
0.00862
2026-11-08
0.00862
2026-11-07
0.00862
2026-11-06
0.00862
2026-11-05
0.00862
2026-11-04
0.00862
2026-11-03
0.00862

Intelligence Sources

mitre ref →

External Links