Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior
Críticas / altas1376▼ 50 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.2) | 1.5% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php. | |
| Modificada | Alta (7.2) | 1.3% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php. | |
| Modificada | Alta (7.2) | 1.3% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php. | |
| Modificada | Alta (7.2) | 1.3% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php. | |
| Modificada | Media (4.8) | 0.64% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php. | |
| Modificada | Alta (7.2) | 1.5% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php. | |
| Modificada | Alta (7.2) | 1.3% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php. | |
| Modificada | Alta (7.2) | 1.3% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php. | |
| Modificada | Alta (7.2) | 1.3% | — | Online Travel Agency System Project Online Travel Agency System | 17/8/2023 | 17/6/2026 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php. |