Lucene search
+L

5 matches found

NVD
NVD
•added 2026/10/27 5:16 p.m.•5 views

CVE-2026-117513

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/27 4:45 p.m.•19 views

CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...

7.5CVSS0.00263EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/27 4:45 p.m.•3 views

CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...

6.9CVSS5.7AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/10/27 4:45 p.m.•3 views

EUVD-2026-111105

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/27 4:45 p.m.•7 views

CVE-2026-117513

The oretnom23 php-travel-agency-system is vulnerable to an SQL injection vulnerability within the Admin Search Pages component, specifically affecting the file admin/customer_search.php. An attacker can perform a remote attack by manipulating the customer_name, voucher_no, or emp_name arguments. ...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder