online travel agency system vulnerabilities and fixes

Recent CVEs affecting online travel agency system, with upgrade or downgrade steps. 9 tracked.

Also searched as: onlinetravelagencysystem.

online travel agency system has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-08-17. Highest priority: CVE-2023-31946 (score 49/100).

CVE-2023-31946 HIGH 7.2 DOWNGRADE File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbit
CVE-2023-31945 HIGH 7.2 DOWNGRADE SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arb
CVE-2023-31944 HIGH 7.2 DOWNGRADE SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arb
CVE-2023-31943 HIGH 7.2 DOWNGRADE SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arb
CVE-2023-31942 MEDIUM 4.8 DOWNGRADE Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to exec
CVE-2023-31941 HIGH 7.2 DOWNGRADE File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbit
CVE-2023-31940 HIGH 7.2 DOWNGRADE SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arb
CVE-2023-31939 HIGH 7.2 DOWNGRADE SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arb
CVE-2023-31938 HIGH 7.2 DOWNGRADE SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arb

FAQ

How do I fix online travel agency system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is online travel agency system being exploited right now?

None of the tracked online travel agency system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which online travel agency system CVE should I patch first?

CVE-2023-31946 currently ranks highest (49/100): File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbit.

RSS feed for online travel agency system · ← Back to latest CVEs