SQL injection in oretnom23 php-travel-agency-system customer search
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- SQL injection
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.
Summary
The oretnom23 php-travel-agency-system in the Admin Search Pages component, file admin/customer_search.php, is affected in code states from commits 4e28b8f84d72420373dd15c3ae32900beb7e0635, 2592d60d8f2c6e199f02c828c6d6fbc7b5298c96, and b58513f8371d098650fac656001bf8f59f795d25. Manipulating the customer_name, voucher_no, or emp_name arguments allows SQL injection (CWE-89). A remote attacker needs no privileges or user interaction, and the impact on confidentiality, integrity, and availability is low. A public exploit has been disclosed, and the project has not responded to an early issue report.
Written with Claude Haiku 5.5 from the sources below · 2026-11-02
Description from the CNA
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search Pages. Executing a manipulation of the argument customer_name/voucher_no/emp_name can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| oretnom23 | php-travel-agency-system | 4e28b8f84d72420373dd15c3ae32900beb7e0635; 2592d60d8f2c6e199f02c828c6d6fbc7b5298c96; b58513f8371d098650fac656001bf8f59f795d25 | — | No fix listed | CNA |
- php-travel-agency-system Vendororetnom23 Affected 4e28b8f84d72420373dd15c3ae32900beb7e0635; 2592d60d8f2c6e199f02c828c6d6fbc7b5298c96; b58513f8371d098650fac656001bf8f59f795d25 Fixed in — No fix listed CNA
Remediation
The sources list no fixed version for oretnom23 php-travel-agency-system.
Written with Claude Haiku 5.5 from the sources below · 2026-11-02
Timeline
- 2026-10-27 Threatist record created from CVE-2026-117513
- 2026-10-27 Alias added: GHSA-mh5w-g3j7-g9gw
- 2026-10-28 Priority changed: MEDIUM → LOW
- 2026-11-02 CISA SSVC decision points changed
- 2026-11-02 Priority changed: LOW → HIGH
References
More oretnom23 vulnerabilities
- TI-2026-23552 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0… CVSS 3.1CRITICAL 9.8
- TI-2026-23551 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0… CVSS 3.1CRITICAL 9.8
- TI-2026-23549 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0… CVSS 3.1CRITICAL 9.8
- TI-2025-28613 SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability… CVSS 3.1CRITICAL 9.8
- TI-2024-35270 SourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps/movies.php. CVSS 3.1CRITICAL 9.8
- TI-2024-34109 SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter. CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-117513 · CVE Program
- CVE-2026-117513 · NVD
- FIRST EPSS
- GHSA-mh5w-g3j7-g9gw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences