Vulnerabilities

TI-2026-81488 CVE-2026-117516 · GHSA-j4gr-x8p4-92w8

SQL injection in oretnom23 php-travel-agency-system contact form

HIGH 70

A weakness has been identified in oretnom23 php-travel-agency-system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2026-10-27 No fix listed CWE-74

TI-2026-81451 CVE-2026-117515 · GHSA-w5x8-f648-7ghf

oretnom23 php-travel-agency-system traceapplication.php SQL injection

HIGH 70

A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2026-10-27 No fix listed CWE-74

TI-2026-81449 CVE-2026-117514 · GHSA-j4mp-63q4-w4fh

SQL injection in oretnom23 php-travel-agency-system admin pages

HIGH 70

A vulnerability was identified in oretnom23 php-travel-agency-system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2026-10-27 No fix listed CWE-74

TI-2026-81430 CVE-2026-117513 · GHSA-mh5w-g3j7-g9gw

SQL injection in oretnom23 php-travel-agency-system customer search

HIGH 70

A vulnerability was determined in oretnom23 php-travel-agency-system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00263 Published 2026-10-27 No fix listed CWE-74

TI-2026-81421 CVE-2026-117512 · GHSA-55pf-pmc3-888g

Unrestricted file upload in oretnom23 php-travel-agency-system

HIGH 70

A vulnerability was found in oretnom23 php-travel-agency-system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00371 Published 2026-10-27 No fix listed CWE-284

TI-2026-79144 CVE-2026-114577 · GHSA-hcc3-vp3g-vffw

SQL injection in oretnom23 php-travel-agency-system insert.php

HIGH 70

A vulnerability was found in oretnom23 php-travel-agency-system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00343 Published 2026-10-22 No fix listed CWE-74

TI-2026-79035 CVE-2026-114441 · GHSA-4crc-x2q4-m7cg

SQL injection in oretnom23 php-travel-agency-system update.php

HIGH 70

A weakness has been identified in oretnom23 php-travel-agency-system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00419 Published 2026-10-21 No fix listed CWE-74

TI-2026-79034 CVE-2026-114440 · GHSA-fp2j-f8hq-v7rf

SQL injection in oretnom23 php-travel-agency-system delete.php

HIGH 70

A vulnerability was identified in oretnom23 php-travel-agency-system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00343 Published 2026-10-21 No fix listed CWE-74

TI-2026-79033 CVE-2026-114439 · GHSA-x2x2-c6m9-3x72

Missing authentication in php-travel-agency-system session handler

HIGH 70

A vulnerability was determined in oretnom23 php-travel-agency-system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00537 Published 2026-10-21 No fix listed CWE-287

TI-2026-78908 CVE-2026-114260 · GHSA-v43j-3mh6-2hx8

Missing authentication in file-management-system-php AJAX handler

HIGH 70

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00554 Published 2026-10-21 No fix listed CWE-287

TI-2026-78873 CVE-2026-114259 · GHSA-j6pm-6wj7-w849

Unrestricted file upload in oretnom23 file-management-system-php

HIGH 70

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00301 Published 2026-10-21 No fix listed CWE-284

TI-2026-78872 CVE-2026-114258 · GHSA-x87w-vm9v-v35f

SQL injection in oretnom23 file-management-system-php File Management

HIGH 70

A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00343 Published 2026-10-21 No fix listed CWE-74

TI-2026-78871 CVE-2026-114257 · GHSA-mqg6-32ww-2p35

SQL injection in oretnom23 file-management-system-php File Download

HIGH 70

A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00401 Published 2026-10-21 No fix listed CWE-74

TI-2026-78870 CVE-2026-114256 · GHSA-cm9w-3c62-xh4c

SQL injection in oretnom23 file-management-system-php folder functions

HIGH 70

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00275 Published 2026-10-21 No fix listed CWE-74

TI-2026-78869 CVE-2026-114255 · GHSA-j83c-cx3g-h5f8

SQL injection in oretnom23 file-management-system-php user accounts

HIGH 70

A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00275 Published 2026-10-21 No fix listed CWE-74

TI-2026-78868 CVE-2026-114254 · GHSA-5hv3-cr5p-4rvh

SQL injection in oretnom23 file-management-system-php login

HIGH 70

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00419 Published 2026-10-21 No fix listed CWE-74

TI-2026-78867 CVE-2026-114253 · GHSA-qpgc-g74v-g9fm

File inclusion in oretnom23 file-management-system-php via index.php

MEDIUM 57

A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00326 Published 2026-10-21 No fix listed CWE-73

TI-2026-08402 CVE-2026-9564 · GHSA-hjcg-j78j-2g64

SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting

MEDIUM 55

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00202 Published 2026-05-26 No fix listed CWE-79

TI-2026-27969 CVE-2026-36947 · GHSA-vw42-3j8f-hj55

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to…

LOW 13

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.0022 Published 2026-04-13 No fix listed CWE-89

TI-2026-27968 CVE-2026-36946 · GHSA-857p-67fh-82j9

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to…

LOW 13

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00284 Published 2026-04-13 No fix listed CWE-89

TI-2026-27959 CVE-2026-36923 · GHSA-45gv-37h8-2rq6

Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file…

LOW 13

Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00225 Published 2026-04-13 No fix listed CWE-89

TI-2026-27958 CVE-2026-36922 · GHSA-q9jx-39hp-w7pj

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file…

LOW 13

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00225 Published 2026-04-13 No fix listed CWE-89

TI-2026-23545 CVE-2026-30523 · GHSA-5gjp-7788-qpxg

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due…

MEDIUM 62

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00314 Published 2026-04-01 No fix listed CWE-20

TI-2026-23544 CVE-2026-30522 · GHSA-5r68-p7r8-jp77

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due…

MEDIUM 62

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00265 Published 2026-04-01 No fix listed CWE-602

TI-2026-23543 CVE-2026-30521 · GHSA-pmwx-37w8-6v99

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due…

MEDIUM 62

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00325 Published 2026-03-31 No fix listed CWE-602

Vulnerabilities

Filters