Online Travel Agency System Project Online Travel Agency System
9 CVEs affecting Online Travel Agency System Project Online Travel Agency System. Latest disclosed: 2023-08-17. Critical: 0, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-31946 | High | 7.2 | 2023-08-17 | File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.p… |
CVE-2023-31945 | High | 7.2 | 2023-08-17 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expendi… |
CVE-2023-31944 | High | 7.2 | 2023-08-17 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_… |
CVE-2023-31943 | High | 7.2 | 2023-08-17 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket… |
CVE-2023-31941 | High | 7.2 | 2023-08-17 | File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_… |
CVE-2023-31940 | High | 7.2 | 2023-08-17 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_… |
CVE-2023-31939 | High | 7.2 | 2023-08-17 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at cust… |
CVE-2023-31938 | High | 7.2 | 2023-08-17 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_… |
CVE-2023-31942 | Medium | 4.8 | 2023-08-17 | Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter… |