← Back

Online Travel Agency System Project

online_travel_agency_system_project

9 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Online Travel Agency System
online_travel_agency_system
9 CVEs

CVEs (9)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-31946
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.
CVE-2023-31945
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.
CVE-2023-31944
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.
CVE-2023-31943
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.
CVE-2023-31942
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php.
CVE-2023-31941
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php.
CVE-2023-31940
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php.
CVE-2023-31939
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php.
CVE-2023-31938
1Online Travel Agency System Project
1Online Travel Agency System
Jun 17, 2026
Aug 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php.