Online Travel Agency System vulnerabilities

8 known vulnerabilities in Online Travel Agency System from Online Travel Agency System Project. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Online Travel Agency System: Unrestricted Upload of File with Dangerous Type

  CVE-2023-31946Aug 17, 2023Online Travel Agency System ProjectEPSS 1.47%

  File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.

• 7.2 High severity

  Online Travel Agency System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31945Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%

  SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.

• 7.2 High severity

  Online Travel Agency System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31944Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%

  SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.

• 7.2 High severity

  Online Travel Agency System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31943Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%

  SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.

• 7.2 High severity

  Online Travel Agency System: Unrestricted Upload of File with Dangerous Type

  CVE-2023-31941Aug 17, 2023Online Travel Agency System ProjectEPSS 1.47%

  File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php.

• 7.2 High severity

  online_travel_agency_system: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31940Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%

  SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php.

• 7.2 High severity

  online_travel_agency_system: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31939Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%

  SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php.

• 7.2 High severity

  online_travel_agency_system: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31938Aug 17, 2023Online Travel Agency System ProjectEPSS 1.3%

  SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php.