CVE-2026-114440 | oretnom23 php-travel-agency-system admin/delete.php sql injection

October 21, 2026 Yanac

A vulnerability identified as critical has been detected in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_id/ticket_id/payment_id/id/document_id/salary_id/emp_id/user_id leads to sql injection.

This vulnerability is documented as CVE-2026-114440. The attack can be initiated remotely. Additionally, an exploit exists.

Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More