Online Travel Agency System

online_travel_agency_system

Vendor: Online Travel Agency System Project • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-31946 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.
CVE-2023-31945 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.
CVE-2023-31944 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.
CVE-2023-31943 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.
CVE-2023-31942 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php.
CVE-2023-31941 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php.
CVE-2023-31940 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php.
CVE-2023-31939 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php.
CVE-2023-31938 1Online Travel Agency System Project 1Online Travel Agency System Jun 17, 2026 Aug 17, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php.