Login Request a demo
High severity · published Oct 27, 2026
CVE-2026-117515
oretnom23 php-travel-agency-system traceapplication.php sql injection
New
7.3
CVSS
–
EPSS
No
On KEV
Description
A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
php-travel-agency-system · oretnom23
4e28b8f84d72420373dd15c3ae32900beb7e0635 · source: vendor
Affected product
PH
php-travel-agency-system
oretnom23
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-117515
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-117515
github.com
https://github.com/oretnom23/php-travel-agency-system/
github.com
https://github.com/oretnom23/php-travel-agency-system/issues/9
vuldb.com
https://vuldb.com/cve/CVE-2026-117515
vuldb.com
https://vuldb.com/submit/1024623
vuldb.com
https://vuldb.com/vuln/427081
vuldb.com
https://vuldb.com/vuln/427081/cti
More from php-travel-agency-system
7.3
CVE-2026-117516
oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection
7.3
CVE-2026-117514
oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection
7.3
CVE-2026-117513
oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection
7.3
CVE-2026-117512
oretnom23 php-travel-agency-system employee_insert.php unrestricted upload
7.3
CVE-2026-114577
oretnom23 php-travel-agency-system Insertion insert.php sql injection