Ashraf-kabir vulnerabilities
We track 3 vulnerabilities in Ashraf-kabir products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 23, 2025.
Latest Ashraf-kabir vulnerabilities
- 9.8 Critical severity
travel-agency: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this issue is some unknown functionality of the file /results.php of the component Search. The manipulation of the argument user_query result
- 7.2 High severity
travel-agency: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /admin_area/index.php. The manipulation of the argument edit_pack le
- 9.8 Critical severity
travel-agency: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is an unknown function of the file /customer_register.php. Executing manipulation can lead to unrestricted upload. It is possible to launch th