# Oretnom23 Php-Travel-Agency-System vulnerabilities Source: https://junglewise.ai/threats/technologies/php-travel-agency-system Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/php-travel-agency-system.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 9 vulnerabilities in Oretnom23 Php-Travel-Agency-System: 0 in the last 7 days and 9 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-117516, was published on 27 October 2026. 9 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 9 - Last 90 days: 9 - All time: 9 (0 critical, 0 exploited in the wild) ## About Oretnom23 Php-Travel-Agency-System PHP web application for managing travel agency operations including bookings and itineraries. ## Latest Oretnom23 Php-Travel-Agency-System vulnerabilities - [CVE-2026-117516: oretnom23 PHP Travel Agency System SQL injection in contact form](https://junglewise.ai/threats/cve-2026-117516-a-weakness-has-been-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117515: oretnom23 php-travel-agency-system SQL injection in traceapplication.php](https://junglewise.ai/threats/cve-2026-117515-a-security-flaw-has-been-discovered-in-oretnom23-php-travel) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117514: oretnom23 PHP Travel Agency System SQL injection in admin pages](https://junglewise.ai/threats/cve-2026-117514-a-vulnerability-was-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117513: oretnom23 PHP Travel Agency System SQL injection in admin search](https://junglewise.ai/threats/cve-2026-117513-a-vulnerability-was-determined-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117512: PHP Travel Agency System unrestricted file upload in admin/employee_insert.php](https://junglewise.ai/threats/cve-2026-117512-a-vulnerability-was-found-in-oretnom23-php-travel-agency-system) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-114577: oretnom23 php-travel-agency-system SQL injection in admin/insert.php](https://junglewise.ai/threats/cve-2026-114577-a-vulnerability-was-found-in-oretnom23-php-travel-agency-system) (high, CVSS 7.3, published 22 Oct 2026) - [CVE-2026-114441: oretnom23 PHP Travel Agency System SQL injection in admin update](https://junglewise.ai/threats/cve-2026-114441-a-weakness-has-been-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114440: oretnom23 php-travel-agency-system SQL injection in admin/delete.php](https://junglewise.ai/threats/cve-2026-114440-a-vulnerability-was-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114439: oretnom23 PHP Travel Agency System missing authentication in session handler](https://junglewise.ai/threats/cve-2026-114439-a-vulnerability-was-determined-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) ## Most severe Oretnom23 Php-Travel-Agency-System vulnerabilities - [CVE-2026-117516: oretnom23 PHP Travel Agency System SQL injection in contact form](https://junglewise.ai/threats/cve-2026-117516-a-weakness-has-been-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117515: oretnom23 php-travel-agency-system SQL injection in traceapplication.php](https://junglewise.ai/threats/cve-2026-117515-a-security-flaw-has-been-discovered-in-oretnom23-php-travel) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117514: oretnom23 PHP Travel Agency System SQL injection in admin pages](https://junglewise.ai/threats/cve-2026-117514-a-vulnerability-was-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117513: oretnom23 PHP Travel Agency System SQL injection in admin search](https://junglewise.ai/threats/cve-2026-117513-a-vulnerability-was-determined-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117512: PHP Travel Agency System unrestricted file upload in admin/employee_insert.php](https://junglewise.ai/threats/cve-2026-117512-a-vulnerability-was-found-in-oretnom23-php-travel-agency-system) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-114577: oretnom23 php-travel-agency-system SQL injection in admin/insert.php](https://junglewise.ai/threats/cve-2026-114577-a-vulnerability-was-found-in-oretnom23-php-travel-agency-system) (high, CVSS 7.3, published 22 Oct 2026) - [CVE-2026-114441: oretnom23 PHP Travel Agency System SQL injection in admin update](https://junglewise.ai/threats/cve-2026-114441-a-weakness-has-been-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114440: oretnom23 php-travel-agency-system SQL injection in admin/delete.php](https://junglewise.ai/threats/cve-2026-114440-a-vulnerability-was-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114439: oretnom23 PHP Travel Agency System missing authentication in session handler](https://junglewise.ai/threats/cve-2026-114439-a-vulnerability-was-determined-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) ## Vulnerabilities per week 9 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 4 | 0 | 0 | | 26 Oct 2026 | 5 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oretnom23 technologies - [Oretnom23 File-Management-System-Php](https://junglewise.ai/threats/technologies/file-management-system-php): 8 vulnerabilities - [Oretnom23 Online Food Ordering System](https://junglewise.ai/threats/technologies/oretnom23-online-food-ordering-system): 6 vulnerabilities - [Oretnom23 Train Station Ticketing System](https://junglewise.ai/threats/technologies/train-station-ticketing-system): 4 vulnerabilities - [Oretnom23 Loan Management System](https://junglewise.ai/threats/technologies/loan-management-system): 3 vulnerabilities - [Oretnom23 Online Shop Project](https://junglewise.ai/threats/technologies/online-shop-project): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oretnom23 Php-Travel-Agency-System vulnerabilities", https://junglewise.ai/threats/technologies/php-travel-agency-system, 12 November 2026.