CVE-2026-117514 | oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php costomer_id/ticket_id/emp_id/salary_id/page_id sql injection

October 27, 2026 Yanac

A vulnerability identified as critical has been detected in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_detail.php of the component Admin Record Pages. The manipulation of the argument costomer_id/ticket_id/emp_id/salary_id/page_id leads to sql injection.

This vulnerability is traded as CVE-2026-117514. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More