Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:oretnom23:php-Travel-Agency-System:4e28b8f84d72420373dd15c3ae32900beb7e0635:*:*:*:*:*:*:*

1 brief RSS
high advisory

oretnom23 php-travel-agency-system: Authentication bypass via user_id manipulation (CVE-2026-114439)

An authentication bypass vulnerability in the php-travel-agency-system allows remote attackers to gain unauthorized access by manipulating the user_id argument in admin/session.php.

php-travel-agency-system +2 web-application authentication-bypass cve-2026-114439
1r 1t 4c updated