CVE-2026-117515
oretnom23 php-travel-agency-system traceapplication.php sql injection
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-89 CWE-74 |
| Vendor | oretnom23 |
| Product | php-travel-agency-system |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for oretnom23 php-travel-agency-system
Be the first to know when new high vulnerabilities affecting oretnom23 php-travel-agency-system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
oretnom23 / php-travel-agency-system
4e28b8f84d72420373dd15c3ae32900beb7e0635
References
vuldb.com: https://vuldb.com/vuln/427081 vuldb.com: https://vuldb.com/vuln/427081/cti vuldb.com: https://vuldb.com/cve/CVE-2026-117515 vuldb.com: https://vuldb.com/submit/1024623 github.com: https://github.com/oretnom23/php-travel-agency-system/issues/9 github.com: https://github.com/oretnom23/php-travel-agency-system/
Credits
🔍 Weaster (VulDB User) VulDB CNA Team