CVE-2026-117516 | oretnom23 php-travel-agency-system Contact Form contact_insert.php name/company/email/topic/phone/comments sql injection (Issue 10)

October 27, 2026 Yanac

A vulnerability marked as critical has been reported in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection.

This vulnerability is handled as CVE-2026-117516. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More