PT-2026-126687

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee insert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been mad...

PT-2023-23539

Name of the Vulnerable Software and Affected Versions Online Travel Agency System version 1.0 Description A remote attacker can execute arbitrary code via a crafted PHP file to the "employee insert.php" endpoint. This allows for the potential execution of malicious code, posing a significant risk...