CVE-2026-10877

HighCVSS 7.3

Published: 05/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

SQL injection vulnerability in SourceCodester Ship Ferry Ticket Reservation System (up to 1.0) in /admin/login.php via Username argument. Remote attack, exploit public.

Risk Assessment

An attacker can remotely bypass authentication and gain admin panel access, potentially stealing reservation data.

Recommendation

Replace login code with parameterized queries. Implement strong authentication and restrict admin panel access.

Other vulnerabilities in SourceCodester Ship Ferry Ticket Reservation System

CVE-2026-11338Low
A cross site scripting (XSS) vulnerability has been identified in SourceCodester Ship Ferry Ticket Reservation System version 1.0 in the user management function. Manipulating the 'Username' argument allows for remote exploitation.

Original NVD description (English source)

A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.