EUVD-2026-111105

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...

CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...

CVE-2026-117513

The oretnom23 php-travel-agency-system is vulnerable to an SQL injection vulnerability within the Admin Search Pages component, specifically affecting the file admin/customer_search.php. An attacker can perform a remote attack by manipulating the customer_name, voucher_no, or emp_name arguments. ...

CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...

CVE-2026-117512 oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-117512 oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-117512 oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-117512

The oretnom23 php-travel-agency-system contains an unrestricted upload vulnerability affecting the admin/employee_insert.php file. By manipulating the employee photo argument, an attacker can perform a remote upload of files. While the project was notified of this issue, no response has been prov...

EUVD-2026-111113

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...

Maian Cart addBanners authenticated PHP upload RCE

Admin session uploads PHP via Store Banners; file lands as content/themedefault/images/banners/img.php. """Maian Cart 3.8 admin addBanners PHP upload RCE.""" from future import annotations import os import re from urllib.parse import quote, urlencode from kittysploit import from...

myDBR — Admin File-Editor PHP Code Injection RCE — Detect

Fingerprint / reachability check for myDBR — Admin File-Editor PHP Code Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for myDBR — Admin File-Editor PHP Code Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Maian Gallery authenticated admin upload PHP webshell RCE

Admin login then cmd=addimages thumb upload writes picN-cat.php under content/galleries///. """Maian Gallery admin thumbnail upload PHP webshell RCE.""" from future import annotations import re import uuid from urllib.parse import quote, urlencode from kittysploit import from...

Maian Pal product image upload PHP webshell RCE

Admin ajax-ops=add stores fmifile as content/products//.php with extension preserved. """Maian Pal 2.1 admin product image upload PHP webshell RCE.""" from future import annotations import re import uuid from urllib.parse import quote, urlencode from kittysploit import from...

Codoforum admin category-image polyglot upload RCE

Authenticated admin upload of GIF/PHP polyglot to sites/default/assets/img/cats/; GET ?c= runs shellexec. """Codoforum admin category-image polyglot upload RCE.""" from future import annotations import re import time from urllib.parse import quote, urlencode from kittysploit import from...

checkmk_php2shell

checkmkphp2shell A Checkmk extension that shows, for every PHP installation on a Linux host, whether it is affected by PHP2Shell - the pre-authentication remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 , disclosed and fixed on 2026-10-21 in PHP 8.2.35, 8.3.36, 8.4.27 and...

The web’s having a rough week. Here’s how to browse safely

You recognize the website. You’ve visited it before. You may even have it bookmarked. Then it asks you to do something unusual: install an update, allow notifications, or run a command to prove you’re human. Stop and check first. A website you trust can still display instructions you shouldn’t...

php2shell-lab

php2shell-lab !labhttps://github.com/qualixar/php2shell-l...

CVE-2026-117540

svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...

CVE-2026-117540 svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop

svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...

CVE-2026-117540

svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...