Online Travel Agency System Project vulnerabilities

We track 8 vulnerabilities in Online Travel Agency System Project products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on August 17, 2023.

8vulnerabilities

0critical

8high

0exploited

7.2average CVSS score

Latest Online Travel Agency System Project vulnerabilities

7.2 High severity
Online Travel Agency System: Unrestricted Upload of File with Dangerous Type
CVE-2023-31946Aug 17, 2023Online Travel Agency System ProjectEPSS 1.47%
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.
7.2 High severity
Online Travel Agency System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-31945Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.
7.2 High severity
Online Travel Agency System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-31944Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.
7.2 High severity
Online Travel Agency System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-31943Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.
7.2 High severity
Online Travel Agency System: Unrestricted Upload of File with Dangerous Type
CVE-2023-31941Aug 17, 2023Online Travel Agency System ProjectEPSS 1.47%
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php.
7.2 High severity
online_travel_agency_system: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-31940Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php.
7.2 High severity
online_travel_agency_system: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-31939Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php.
7.2 High severity
online_travel_agency_system: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-31938Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php.