Impact

Successful exploitation allows a remote, unauthenticated attacker to bypass authentication controls and potentially gain administrative access to the travel agency system.

Recommendation

• Inventory all instances of 'php-travel-agency-system' within your environment.
• Restrict access to the 'admin/' directory to known, trusted IP addresses via web application firewall or network-level access controls until a security update is provided by the vendor.
• Implement request logging for all calls to 'admin/session.php' to identify potential exploitation attempts characterized by non-standard 'user_id' parameters.
• If the application is not business-critical, disable it until the vulnerability is addressed by the maintainer.