Online Travel Agency System Project

9 CVEs across 1 Online Travel Agency System Project products. Browse Online Travel Agency System Project vulnerabilities, severities, and proof-of-concept exploits.

Online Travel Agency System Project products with known CVEs

ProductCVEs
Online Travel Agency System9
Online Travel Agency System Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-31946High7.22023-08-17File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.p…
CVE-2023-31945High7.22023-08-17SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expendi…
CVE-2023-31944High7.22023-08-17SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_…
CVE-2023-31943High7.22023-08-17SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket…
CVE-2023-31942Medium4.82023-08-17Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter…
CVE-2023-31941High7.22023-08-17File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_…
CVE-2023-31940High7.22023-08-17SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_…
CVE-2023-31939High7.22023-08-17SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at cust…
CVE-2023-31938High7.22023-08-17SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_…