oretnom23 vulnerabilities

Products

• online computer and laptop store 32
• computer laboratory management system 30
• human resource management system 29
• online eyewear shop 29
• online food ordering system 29
• clinics patient management system 27
• lost and found information system 27
• customer support system 19
• food ordering management system 17
• simple online bidding system 17
• ac repair and services system 16
• employee and visitor gate pass logging system 15
• employee task management system 15
• service provider management system 15
• simple customer relationship management system 15
• student study center desk management system 15
• simple student attendance system 14
• online car wash booking system 13
• simple cold storage management system 13
• car driving school management system 12
• simple realtime quiz system 12
• establishment billing management system 11
• student grading system 11
• lot reservation management system 9
• online mobile store management system 9
• pharmacy point of sale system 9
• php-travel-agency-system 9
• file-management-system-php 8
• simple online mens salon management system 8
• Stock Management System 8

Latest oretnom23 CVEs

Newest publication first · page 1 of 32

1. CVE-2026-117516 oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection

   Published 2026-10-27

   Medium·CVSS 6.9 EPSS 0.41%

   A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection....

2. CVE-2026-117515 oretnom23 php-travel-agency-system traceapplication.php sql injection

   Published 2026-10-27

   Medium·CVSS 6.9 EPSS 0.41%

   A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the att...

3. CVE-2026-117514 oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection

   Published 2026-10-27

   Medium·CVSS 6.9 EPSS 0.41%

   A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_detail.php of the component Admin Record Pages. The manipulation of the argument costomer_id/ticket_id/emp_id/salary_id/page_id leads to sql...

4. CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

   Published 2026-10-27

   Medium·CVSS 6.9 EPSS 0.26%

   A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search Pages. Executing a manipulation of the argument customer_name/voucher_no/emp_name can lead to sql inje...

5. CVE-2026-117512 oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

   Published 2026-10-27

   Medium·CVSS 6.9 EPSS 0.37%

   A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee_insert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exp...

6. CVE-2026-114577 oretnom23 php-travel-agency-system Insertion insert.php sql injection

   Published 2026-10-22

   Medium·CVSS 6.9 EPSS 0.34%

   A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipulation of the argument costomer_id/payment_type/amount/description/user/uploadimage/full_name/visa_n...

7. CVE-2026-114441 oretnom23 php-travel-agency-system update.php sql injection

   Published 2026-10-21

   Medium·CVSS 6.9 EPSS 0.42%

   A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/full_name/visa_no/hiden/title/description/page_id/user causes sql injection. The attack may be i...

8. CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

   Published 2026-10-21

   Medium·CVSS 6.9 EPSS 0.34%

   A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_id/ticket_id/payment_id/id/document_id/salary_id/emp_id/user_id leads to sql injection. The attack can be ini...

9. CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

   Published 2026-10-21

   Medium·CVSS 6.9 EPSS 0.54%

   A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument user_id can lead to missing authentication. It is po...

10. CVE-2026-114260 oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication

    Published 2026-10-21

    Medium·CVSS 6.9 EPSS 0.55%

    A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function delete_folder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing au...

11. CVE-2026-114259 oretnom23 file-management-system-php admin_class.php save_files unrestricted upload

    Published 2026-10-21

    Medium·CVSS 6.9 EPSS 0.30%

    A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launc...

12. CVE-2026-114258 oretnom23 file-management-system-php File Management files.php sql injection

    Published 2026-10-21

    Medium·CVSS 6.9 EPSS 0.34%

    A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulation of the argument fid/id resul...

13. CVE-2026-114257 oretnom23 file-management-system-php File Download download.php readfile sql injection

    Published 2026-10-21

    Medium·CVSS 6.9 EPSS 0.40%

    A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID...

14. CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection

    Published 2026-10-21

    Medium·CVSS 6.9 EPSS 0.27%

    A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save_folder/delete_folder/delete_file/file_rename/save_files of the file admin_class.php of the component Folder Management. This manipu...

15. CVE-2026-114255 oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection

    Published 2026-10-21

    Medium·CVSS 6.9 EPSS 0.27%

    A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save_user of the file admin_class.php of the component User Account Management. The manipulation of the argument name/username/pas...

16. CVE-2026-114254 oretnom23 file-management-system-php admin_class.php login sql injection

    Published 2026-10-21

    Medium·CVSS 6.9 EPSS 0.42%

    A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file admin_class.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of th...

17. CVE-2026-114253 oretnom23 file-management-system-php index.php include file inclusion

    Published 2026-10-21

    Medium·CVSS 5.3 EPSS 0.33%

    A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the function include of the file index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be l...

18. CVE-2026-9564 SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting

    Published 2026-05-26

    Medium·CVSS 4.8 EPSS 0.20%

    A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/view_patient. Performing a manipulation of the argument Remarks results in cross site scripting. Re...

19. CVE-2026-36947 Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.

    Published 2026-04-13

    Low·CVSS 2.7 EPSS 0.23%

    Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.

20. CVE-2026-36923 Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.

    Published 2026-04-13

    Low·CVSS 2.7 EPSS 0.23%

    Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.

21. CVE-2026-36922 Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.

    Published 2026-04-13

    Low·CVSS 2.7 EPSS 0.23%

    Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.

22. CVE-2026-36946 Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.

    Published 2026-04-13

    Low·CVSS 2.7 EPSS 0.30%

    Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.

23. CVE-2026-30522 A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific p...

    Published 2026-04-01

    Medium·CVSS 6.5 EPSS 0.27%

    A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific penalty rates for overdue payments. While the frontend interface prevents users f...

24. CVE-2026-30523 A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define "Loan Plans" which deter...

    Published 2026-04-01

    Medium·CVSS 6.5 EPSS 0.31%

    A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define "Loan Plans" which determine the duration of a loan (in months). However, the backend fails to validate...

25. CVE-2026-30521 A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific i...

    Published 2026-03-31

    Medium·CVSS 6.5 EPSS 0.33%

    A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific interest rates. While the frontend interface prevents users from entering negativ...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.