CPE
An authentication bypass vulnerability in the php-travel-agency-system allows remote attackers to gain unauthorized access by manipulating the user_id argument in admin/session.php.