Lucene search
+L

167 matches found

NVD
NVD
•added 2026/08/11 5:17 a.m.•18 views

CVE-2026-19425

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS0.00644EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/11 4:17 a.m.•15 views

EUVD-2026-55933

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS5.9AI score0.00644EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/11 4:17 a.m.•28 views

CVE-2026-19425

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS5.9AI score0.00644EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/11 4:17 a.m.•8 views

CVE-2026-19425 Win Men Intermational|Travel Agency Management System - SQL Injection

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS5.9AI score0.00644EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/11 4:17 a.m.•89 views

CVE-2026-19425

The CVE-2026-19425 entry concerns the Travel Agency Management System from Win Men Intermational, which has a SQL Injection vulnerability allowing unauthenticated remote attackers to inject arbitrary SQL to read, modify, or delete database contents. The documents do not specify the affected versi...

9.8CVSS5.9AI score0.00644EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/11 4:17 a.m.•45 views

CVE-2026-19425 Win Men Intermational|Travel Agency Management System - SQL Injection

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS0.00644EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•13 views

PT-2026-70057

Name of the Vulnerable Software and Affected Versions Travel Agency Management System affected versions not specified Description An issue exists where unauthenticated remote attackers can perform SQL Injection, a technique used to insert malicious SQL code into a query. This allows the attacker ...

9.8CVSS5.8AI score0.00644EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•3 views

CVE-2026-19425: Improper Neutralization of Special Elements used in an SQL Command

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS5.9AI score0.00644EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 3:17 p.m.•13 views

CVE-2026-32346

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/13 9:31 p.m.•16 views

EUVD-2026-11831

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/13 7:54 p.m.•13 views

CVE-2026-32346

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

5.3CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/13 11:41 a.m.•29 views

CVE-2026-32346

The CVE-2026-32346 entry concerns the WordPress Travel Agency theme (raratheme) <= 1.5.5 with a Missing Authorization vulnerability. The issue stems from incorrectly configured access control allowing bypass of authorization to access restricted functionality or data. Affected software: Travel...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 11:41 a.m.•7 views

CVE-2026-32346

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

5.8AI score0.00294EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/13 11:41 a.m.•52 views

CVE-2026-32346 WordPress Travel Agency theme <= 1.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

5.3CVSS0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/13 11:41 a.m.•6 views

CVE-2026-32346 WordPress Travel Agency theme <= 1.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•16 views

WordPress plugin Travel Agency 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•31 views

PT-2026-25193

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•1 views

CVE-2026-32346: Missing Authorization

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

5.3CVSS5.9AI score0.00294EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:33 p.m.•17 views

CVE-2023-31945

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at dailyexpenditureedit.php...

7.2CVSS8.7AI score0.01297EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:33 p.m.•15 views

CVE-2023-31941

File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employeeinsert.php...

7.2CVSS7.9AI score0.01468EPSS
SaveExploits1References1
Rows per page
Query Builder