Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown
CVE-2024-37451
Disclosure Date: January 02, 2025 (last updated January 03, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Travel Agency allows Cross Site Request Forgery.This issue affects Travel Agency: from n/a through 1.4.9.
0
Attacker Value
Unknown
CVE-2023-31946
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.
0
Attacker Value
Unknown
CVE-2023-31945
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.
0
Attacker Value
Unknown
CVE-2023-31944
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.
0
Attacker Value
Unknown
CVE-2023-31943
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.
0
Attacker Value
Unknown
CVE-2023-31942
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php.
0
Attacker Value
Unknown
CVE-2023-31941
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php.
0
Attacker Value
Unknown
CVE-2023-31940
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php.
0
Attacker Value
Unknown
CVE-2023-31939
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php.
0
Attacker Value
Unknown
CVE-2023-31938
Disclosure Date: August 17, 2023 (last updated October 08, 2023)
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php.
0
