php-travel-agency-system vulnerabilities
9 known vulnerabilities in php-travel-agency-system from Oretnom23. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
php-travel-agency-system: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments ca
- 7.3 High severity
php-travel-agency-system: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possib
- 7.3 High severity
php-travel-agency-system: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_detail.php of the component Admin Record Pages. The manipulation of the argument costomer_id/ticket_id/emp_id/salary_id/
- 7.3 High severity
php-travel-agency-system: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search Pages. Executing a manipulation of the argument customer_name/voucher_no/emp_name
- 7.3 High severity
php-travel-agency-system: Improper Access Control
A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee_insert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried o
- 7.3 High severity
php-travel-agency-system: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipulation of the argument costomer_id/payment_type/amount/description/user/uploadim
- 7.3 High severity
php-travel-agency-system: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/full_name/visa_no/hiden/title/description/page_id/user causes sql injection.
- 7.3 High severity
php-travel-agency-system: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_id/ticket_id/payment_id/id/document_id/salary_id/emp_id/user_id leads to sql injection. T
- 7.3 High severity
php-travel-agency-system: Improper Authentication
A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument user_id can lead to missing auth