Travel Agency

4 CVEs product

Monthly

CVE-2026-32346 MEDIUM This Month

Improper access control in raratheme Travel Agency versions up to 1.5.5 permits unauthenticated attackers to modify data through misconfigured authorization checks. This vulnerability allows unauthorized changes to travel agency information without requiring authentication or user interaction, potentially compromising business operations and data integrity.

Authentication Bypass Travel Agency
NVD VulDB
CVSS 3.1
5.3
EPSS
0.0%
CVE-2025-13546 MEDIUM POC This Month

A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Travel Agency
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.0%
CVE-2025-13545 MEDIUM POC This Month

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Travel Agency
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.0%
CVE-2025-13544 MEDIUM POC This Month

A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

File Upload PHP Authentication Bypass Travel Agency
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2026-32346
EPSS 0% CVSS 5.3
MEDIUM This Month

Improper access control in raratheme Travel Agency versions up to 1.5.5 permits unauthenticated attackers to modify data through misconfigured authorization checks. This vulnerability allows unauthorized changes to travel agency information without requiring authentication or user interaction, potentially compromising business operations and data integrity.

Authentication Bypass Travel Agency
NVD VulDB
CVE-2025-13546
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Travel Agency
NVD GitHub VulDB
CVE-2025-13545
EPSS 0% CVSS 5.1
MEDIUM POC This Month

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Travel Agency
NVD GitHub VulDB
CVE-2025-13544
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

File Upload PHP Authentication Bypass +1
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy