CVE-2026-117515

A weakness was identified in oretnom23 php-travel-agency-system in an unknown function of contact_insert.php in the Contact Form Handler component. Manipulation of the name/company/email/topic/phone/comments arguments causes SQL injection, the attack can be initiated remotely, the exploit has been made public, and the project has not responded to the issue report.

A vulnerability was identified in oretnom23 php-travel-agency-system affecting admin/customer_detail.php in the Admin Record Pages component. Manipulation of the costomer_id/ticket_id/emp_id/salary_id/page_id arguments leads to SQL injection, and the attack can be initiated remotely.

A SQL injection vulnerability exists in oretnom23 php-travel-agency-system in the file admin/customer_search.php. Manipulating the customer_name, voucher_no, or emp_name arguments allows SQL injection. The attack can be performed remotely and a public exploit is available.

An unrestricted upload vulnerability exists in oretnom23 php-travel-agency-system in admin/employee_insert.php via manipulation of the employee photo argument. An attacker can remotely upload arbitrary files. A public exploit is available.

In oretom23 php-travel-agency-system, admin/insert.php in the Insertion Handler is vulnerable to SQL injection via manipulation of the costomer_id, payment_type, amount, description, user, uploadimage, full_name, and visa_no arguments. The attack can be launched remotely, a public exploit is available, and the project has not responded to the report.

php-travel-agency-system (oretnom23) in admin/update.php contains an SQL injection vulnerability via manipulation of the action, full_name, visa_no, hiden, title, description, page_id, and user arguments. The attack can be launched remotely and the exploit is publicly available.

php-travel-agency-system (oretnom23) in admin/delete.php contains an SQL injection vulnerability via manipulation of the costomer_id, ticket_id, payment_id, id, document_id, salary_id, emp_id, and user_id arguments. The attack can be launched remotely and the exploit is publicly available.

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected is some unknown functionality of the file admin/session.php of the Session Handler component. Manipulation of the user_id argument can lead to missing authentication. The attack can be launched remotely, and the exploit has been publicly disclosed.