CVE-2026-114577 | oretnom23 php-travel-agency-system Insertion admin/insert.php sql injection

October 21, 2026 Yanac

A vulnerability, which was classified as critical, was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipulation of the argument costomer_id/payment_type/amount/description/user/uploadimage/full_name/visa_no results in sql injection.

This vulnerability is cataloged as CVE-2026-114577. The attack may be launched remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More