CVE-2026-117512

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-117512 oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-117512 oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

EUVD-2026-111113

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-117512 oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-117512

The oretnom23 php-travel-agency-system contains an unrestricted upload vulnerability affecting the admin/employee_insert.php file. By manipulating the employee photo argument, an attacker can perform a remote upload of files. While the project was notified of this issue, no response has been prov...

Oretnom23 Online Travel Agency System permission and access control vulnerability

The Oretnom23 Online Travel Agency System has a security vulnerability stemming from unrestricted file uploads related to the “employee photo” parameter in the admin/employeeinsert.php file. This flaw may allow remote attackers to upload arbitrary files...

CVE-2026-117512: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2023-31941: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employeeinsert.php...