# Oretnom23 vulnerabilities Source: https://junglewise.ai/threats/vendors/oretnom23 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/oretnom23.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 49 vulnerabilities in Oretnom23: 0 in the last 7 days and 17 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-117516, was published on 27 October 2026. 17 vulnerabilities in the last four weeks, up from none in the four before. 6 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 17 - Last 90 days: 17 - All time: 49 (3 critical, 0 exploited in the wild) ## About Oretnom23 A GitHub user and software developer. ## Latest Oretnom23 vulnerabilities - [CVE-2026-117516: oretnom23 PHP Travel Agency System SQL injection in contact form](https://junglewise.ai/threats/cve-2026-117516-a-weakness-has-been-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117515: oretnom23 php-travel-agency-system SQL injection in traceapplication.php](https://junglewise.ai/threats/cve-2026-117515-a-security-flaw-has-been-discovered-in-oretnom23-php-travel) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117514: oretnom23 PHP Travel Agency System SQL injection in admin pages](https://junglewise.ai/threats/cve-2026-117514-a-vulnerability-was-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117513: oretnom23 PHP Travel Agency System SQL injection in admin search](https://junglewise.ai/threats/cve-2026-117513-a-vulnerability-was-determined-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-117512: PHP Travel Agency System unrestricted file upload in admin/employee_insert.php](https://junglewise.ai/threats/cve-2026-117512-a-vulnerability-was-found-in-oretnom23-php-travel-agency-system) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-114577: oretnom23 php-travel-agency-system SQL injection in admin/insert.php](https://junglewise.ai/threats/cve-2026-114577-a-vulnerability-was-found-in-oretnom23-php-travel-agency-system) (high, CVSS 7.3, published 22 Oct 2026) - [CVE-2026-114441: oretnom23 PHP Travel Agency System SQL injection in admin update](https://junglewise.ai/threats/cve-2026-114441-a-weakness-has-been-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114440: oretnom23 php-travel-agency-system SQL injection in admin/delete.php](https://junglewise.ai/threats/cve-2026-114440-a-vulnerability-was-identified-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114439: oretnom23 PHP Travel Agency System missing authentication in session handler](https://junglewise.ai/threats/cve-2026-114439-a-vulnerability-was-determined-in-oretnom23-php-travel-agency) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114260: oretnom23 file-management-system-php authentication bypass in AJAX handler](https://junglewise.ai/threats/cve-2026-114260-a-vulnerability-has-been-found-in-oretnom23-file-management) (medium, CVSS 6.5, published 21 Oct 2026) - [CVE-2026-114259: oretnom23 file-management-system-php unrestricted file upload](https://junglewise.ai/threats/cve-2026-114259-a-flaw-has-been-found-in-oretnom23-file-management-system-php-up) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114258: oretnom23 file-management-system-php SQL injection in file operations](https://junglewise.ai/threats/cve-2026-114258-a-vulnerability-was-detected-in-oretnom23-file-management-system) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114257: oretnom23 file-management-system-php SQL injection in download.php](https://junglewise.ai/threats/cve-2026-114257-a-security-vulnerability-has-been-detected-in-oretnom23-file) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114256: oretnom23 file-management-system-php SQL injection in folder management](https://junglewise.ai/threats/cve-2026-114256-a-weakness-has-been-identified-in-oretnom23-file-management) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114255: oretnom23 file-management-system-php SQL injection in user account management](https://junglewise.ai/threats/cve-2026-114255-a-security-flaw-has-been-discovered-in-oretnom23-file-management) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114254: oretnom23 file-management-system-php SQL injection in admin login](https://junglewise.ai/threats/cve-2026-114254-a-vulnerability-was-identified-in-oretnom23-file-management) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114253: oretnom23 File Management System PHP local file inclusion](https://junglewise.ai/threats/cve-2026-114253-a-vulnerability-was-determined-in-oretnom23-file-management) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-36947: Sourcecodester Computer and Mobile Repair Shop Management System SQL injection in view_service.php](https://junglewise.ai/threats/cve-2026-36947-sourcecodester-computer-and-mobile-repair-shop-management-system) (low, CVSS 2.7, published 13 Apr 2026) - [CVE-2026-36946: Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file…](https://junglewise.ai/threats/cve-2026-36946-sourcecodester-computer-and-mobile-repair-shop-management-system) (low, CVSS 2.7, published 13 Apr 2026) - [CVE-2026-36923: Sourcecodester Cab Management System SQL injection in view_booking.php](https://junglewise.ai/threats/cve-2026-36923-sourcecodester-cab-management-system-sql-injection-in-view) (low, CVSS 2.7, published 13 Apr 2026) - [CVE-2026-36922: Sourcecodester Cab Management System SQL injection in view_category.php](https://junglewise.ai/threats/cve-2026-36922-sourcecodester-cab-management-system-sql-injection-in-view) (low, CVSS 2.7, published 13 Apr 2026) - [CVE-2026-30523: A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input…](https://junglewise.ai/threats/cve-2026-30523-a-business-logic-vulnerability-exists-in-sourcecodester-loan) (medium, CVSS 6.5, published 1 Apr 2026) - [CVE-2026-30521: SourceCodester Loan Management System business logic flaw in Plan Management](https://junglewise.ai/threats/cve-2026-30521-sourcecodester-loan-management-system-business-logic-flaw-in-plan) (medium, CVSS 6.5, published 31 Mar 2026) - [CVE-2026-30520: SourceCodester Loan Management System blind SQL injection in ajax.php](https://junglewise.ai/threats/cve-2026-30520-sourcecodester-loan-management-system-blind-sql-injection-in-ajax) (medium, CVSS 5.4, published 31 Mar 2026) - [CVE-2026-30534: A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via…](https://junglewise.ai/threats/cve-2026-30534-a-sql-injection-vulnerability-exists-in-sourcecodester-online) (high, CVSS 8.3, published 27 Mar 2026) ## Most severe Oretnom23 vulnerabilities - [CVE-2026-30530: A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file…](https://junglewise.ai/threats/cve-2026-30530-a-sql-injection-vulnerability-exists-in-sourcecodester-online) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-30532: A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php…](https://junglewise.ai/threats/cve-2026-30532-a-sql-injection-vulnerability-exists-in-sourcecodester-online) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2025-70141: SourceCodester Customer Support System broken access control in ajax.php](https://junglewise.ai/threats/cve-2025-70141-sourcecodester-customer-support-system-broken-access-control-in) (critical, CVSS 9.4, published 18 Feb 2026) - [CVE-2026-30531: A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file…](https://junglewise.ai/threats/cve-2026-30531-a-sql-injection-vulnerability-exists-in-sourcecodester-online) (high, CVSS 8.8, published 27 Mar 2026) - [CVE-2026-30529: A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file…](https://junglewise.ai/threats/cve-2026-30529-a-sql-injection-vulnerability-exists-in-sourcecodester-online) (high, CVSS 8.8, published 27 Mar 2026) - [CVE-2026-30534: A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via…](https://junglewise.ai/threats/cve-2026-30534-a-sql-injection-vulnerability-exists-in-sourcecodester-online) (high, CVSS 8.3, published 27 Mar 2026) - [CVE-2025-63891: SourceCodester Simple Online Book Store System information disclosure in backup file](https://junglewise.ai/threats/cve-2025-63891-sourcecodester-simple-online-book-store-system-information) (high, CVSS 7.5, published 14 Nov 2025) - [CVE-2025-13344: A weakness has been identified in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is…](https://junglewise.ai/threats/cve-2025-13344-a-weakness-has-been-identified-in-sourcecodester-train-station) (high, CVSS 7.3, published 18 Nov 2025) - [CVE-2025-12257: A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some…](https://junglewise.ai/threats/cve-2025-12257-a-security-vulnerability-has-been-detected-in-sourcecodester) (high, CVSS 7.3, published 27 Oct 2025) - [CVE-2025-13060: A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown…](https://junglewise.ai/threats/cve-2025-13060-a-security-vulnerability-has-been-detected-in-sourcecodester) (high, CVSS 7.3, published 12 Nov 2025) ## Vulnerabilities per week 17 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 12 | 0 | 0 | | 26 Oct 2026 | 5 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Oretnom23 technologies - [Oretnom23 Php-Travel-Agency-System](https://junglewise.ai/threats/technologies/php-travel-agency-system): 9 vulnerabilities - [Oretnom23 File-Management-System-Php](https://junglewise.ai/threats/technologies/file-management-system-php): 8 vulnerabilities - [Oretnom23 Online Food Ordering System](https://junglewise.ai/threats/technologies/oretnom23-online-food-ordering-system): 6 vulnerabilities - [Oretnom23 Train Station Ticketing System](https://junglewise.ai/threats/technologies/train-station-ticketing-system): 4 vulnerabilities - [Oretnom23 Loan Management System](https://junglewise.ai/threats/technologies/loan-management-system): 3 vulnerabilities - [Oretnom23 Online Shop Project](https://junglewise.ai/threats/technologies/online-shop-project): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oretnom23 vulnerabilities", https://junglewise.ai/threats/vendors/oretnom23, 13 November 2026.