Approved changes feed: RSS · Atom

cpe:2.3:a:online_travel_agency_system_project:online_travel_agency_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOnline Travel Agency System Project (52071f7b-4721-5776-a730-d30c8b47067c)
ProductOnline Travel Agency System (b6b33c60-8c7b-5ab2-ac20-382538b71b73)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-31946 vulnerable 2026-06-08 06:04:43.615619 Details available
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.
Published: 2023-08-17T00:00:00.000Z
Updated: 2024-10-08T15:09:11.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31945 vulnerable 2026-06-08 06:04:43.615323 Details available
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.
Published: 2023-08-17T00:00:00.000Z
Updated: 2024-10-08T15:09:48.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31944 vulnerable 2026-06-08 06:04:43.614913 Details available
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.
Published: 2023-08-17T00:00:00.000Z
Updated: 2024-10-08T15:11:38.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31943 vulnerable 2026-06-08 06:04:43.614458 Details available
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.
Published: 2023-08-17T00:00:00.000Z
Updated: 2024-10-08T15:12:06.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31942 vulnerable 2026-06-08 06:04:43.613967 Details available
Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php.
Published: 2023-08-17T00:00:00.000Z
Updated: 2024-10-08T15:12:46.882Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31941 vulnerable 2026-06-08 06:04:43.613666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31940 vulnerable 2026-06-08 06:04:43.613084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31939 vulnerable 2026-06-08 06:04:43.612692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31938 vulnerable 2026-06-08 06:04:43.612217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.