CVE-2026-114441

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/full_name/visa_no/hiden/title/description/page_id/user causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-74
• CWE-89

• https://github.com/oretnom23/php-travel-agency-system/
• https://github.com/oretnom23/php-travel-agency-system/issues/4
• https://vuldb.com/cve/CVE-2026-114441
• https://vuldb.com/submit/1020180
• https://vuldb.com/vuln/424814
• https://vuldb.com/vuln/424814/cti

Published

Oct 21, 2026

Last Modified

Oct 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114429The WPVR WordPress plugin before 9.0.3 does not properly sa…6.8
• CVE-2026-11443Allegra downloadAttachment Cross-Site Scripting Authenticati…4.6
• CVE-2026-114437In the Golang Chi web framework, the ClientIPFromXFF middlew…4.8
• CVE-2026-114438A flaw was found in the Update User Locale required action o…4.2
• CVE-2026-114439A vulnerability was determined in oretnom23 php-travel-agenc…7.3
• CVE-2026-114440A vulnerability was identified in oretnom23 php-travel-agenc…7.3
• CVE-2026-114443The Security Plugin, Firewall & Malware Scanner with Auto Re…7.5
• CVE-2026-114444The Security Plugin, Firewall & Malware Scanner with Auto Re…4.4
• CVE-2026-114457A flaw was found in mod_qos. An unauthenticated remote attac…3.7
• CVE-2026-114458A flaw was found in mod_qos. An unauthenticated remote attac…5.9
• CVE-2026-114459A flaw was found in mod_qos. When inspecting HTTP response b…3.7
• CVE-2026-11446The Booktics – Booking Calendar for Appointments and Service…5.3