https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13546.htmlhttps://patchthecve.com/cve/CVE-2025-13546.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.3: A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this issue is some unknown functionality of the file /results.php of the component Search. The manipulation of the argument user_query results in sql injection. The attack can be lahttps://patchthecve.com/cve/CVE-2025-13545.htmlhttps://patchthecve.com/cve/CVE-2025-13545.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 4.7: A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /admin_area/index.php. The manipulation of the argument edit_pack leads to sql injection. The attack can be https://patchthecve.com/cve/CVE-2025-13544.htmlhttps://patchthecve.com/cve/CVE-2025-13544.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.3: A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is an unknown function of the file /customer_register.php. Executing manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been