CVE-2026-114577

A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipulation of the argument costomerid/paymenttype/amount/description/user/uploadimage/fullname/visano results in sql...

EUVD-2026-107669

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

EUVD-2026-107667

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

EUVD-2026-107665

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

CVE-2026-114441

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

CVE-2026-114439

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

CVE-2026-114440

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114441 oretnom23 php-travel-agency-system update.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

CVE-2026-114441

The oretnom23 php-travel-agency-system software contains a SQL injection vulnerability affecting the processing of the admin/update.php file. Attackers can initiate this attack remotely by manipulating specific arguments, including action , full_name , visa_no , hiden , title , description , page...

CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114440

A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system within the admin/delete.php file. Attackers can initiate a remote attack by manipulating the costomer_id , ticket_id , payment_id , id , document_id , salary_id , emp_id , or user_id arguments. While the exploit is pub...

CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

CVE-2026-114439

The oretnom23 php-travel-agency-system is vulnerable to missing authentication within the Session Handler component, specifically affecting the admin/session.php file. An attacker can perform a remote attack by manipulating the user_id argument. While the exploit has been publicly disclosed, the ...

CVE-2026-114259

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function savefiles of the file adminclass.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack...

CVE-2026-114260

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function deletefolder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The...

CVE-2026-114258

A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id results in sql...

EUVD-2026-107364

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function deletefolder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The...

CVE-2026-114260

The oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 ) contains a missing authentication vulnerability in the AJAX Handler component. Specifically, the delete_folder function within the ajax.php file fails to properly authenticate users when the ID argum...

CVE-2026-114259

The oretnom23 file-management-system-php software (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 ) is vulnerable to an unrestricted upload flaw. The issue resides in the save_files function within the admin_class.php file. By manipulating the Upload argument, an attacker can achieve an un...

EUVD-2026-107363

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function savefiles of the file adminclass.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack...