CVE-2008-6225: Mole-Group Airline Ticket Sale Script

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies [spread] out such false informations. Such scripts or versions [do not] exist.

Affected products

• Mole-Group Airline Ticket Sale Script: affected versions not specified

Published 2009-02-20. Last modified 2026-06-16.