# cve.now: Oretnom23

The newest entries naming Oretnom23 as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-117516](https://cve.now/CVE-2026-117516.md): oretnom23 php-travel-agency-system Contact Form contact\_insert.php sql injection (CVSS 6.9)
- [CVE-2026-117515](https://cve.now/CVE-2026-117515.md): oretnom23 php-travel-agency-system traceapplication.php sql injection (CVSS 6.9)
- [CVE-2026-117514](https://cve.now/CVE-2026-117514.md): oretnom23 php-travel-agency-system Admin Record Pages customer\_detail.php sql injection (CVSS 6.9)
- [CVE-2026-117513](https://cve.now/CVE-2026-117513.md): oretnom23 php-travel-agency-system Admin Search Pages customer\_search.php sql injection (CVSS 6.9)
- [CVE-2026-117512](https://cve.now/CVE-2026-117512.md): oretnom23 php-travel-agency-system employee\_insert.php unrestricted upload (CVSS 6.9)
- [CVE-2026-114577](https://cve.now/CVE-2026-114577.md): oretnom23 php-travel-agency-system Insertion insert.php sql injection (CVSS 6.9)
- [CVE-2026-114441](https://cve.now/CVE-2026-114441.md): oretnom23 php-travel-agency-system update.php sql injection (CVSS 6.9)
- [CVE-2026-114440](https://cve.now/CVE-2026-114440.md): oretnom23 php-travel-agency-system delete.php sql injection (CVSS 6.9)
- [CVE-2026-114439](https://cve.now/CVE-2026-114439.md): oretnom23 php-travel-agency-system Session session.php missing authentication (CVSS 6.9)
- [CVE-2026-114260](https://cve.now/CVE-2026-114260.md): oretnom23 file-management-system-php AJAX ajax.php delete\_folder missing authentication (CVSS 6.9)
- [CVE-2026-114259](https://cve.now/CVE-2026-114259.md): oretnom23 file-management-system-php admin\_class.php save\_files unrestricted upload (CVSS 6.9)
- [CVE-2026-114258](https://cve.now/CVE-2026-114258.md): oretnom23 file-management-system-php File Management files.php sql injection (CVSS 6.9)
- [CVE-2026-114257](https://cve.now/CVE-2026-114257.md): oretnom23 file-management-system-php File Download download.php readfile sql injection (CVSS 6.9)
- [CVE-2026-114256](https://cve.now/CVE-2026-114256.md): oretnom23 file-management-system-php Folder Management admin\_class.php save\_files sql injection (CVSS 6.9)
- [CVE-2026-114255](https://cve.now/CVE-2026-114255.md): oretnom23 file-management-system-php User Account Management admin\_class.php save\_user sql injection (CVSS 6.9)
- [CVE-2026-114254](https://cve.now/CVE-2026-114254.md): oretnom23 file-management-system-php admin\_class.php login sql injection (CVSS 6.9)
- [CVE-2026-114253](https://cve.now/CVE-2026-114253.md): oretnom23 file-management-system-php index.php include file inclusion (CVSS 5.3)
- [CVE-2026-9564](https://cve.now/CVE-2026-9564.md): SourceCodester/oretnom23 Hospitals Patient Records Management System view\_patient cross site scripting (CVSS 4.8)
- [CVE-2025-4806](https://cve.now/CVE-2025-4806.md): SourceCodester/oretnom23 Stock Management System view\_bo sql injection (CVSS 5.3)
- [CVE-2025-4787](https://cve.now/CVE-2025-4787.md): SourceCodester/oretnom23 Stock Management System view\_sale sql injection (CVSS 5.3)
- [CVE-2025-4786](https://cve.now/CVE-2025-4786.md): SourceCodester/oretnom23 Stock Management System view\_return sql injection (CVSS 5.3)
- [CVE-2025-4782](https://cve.now/CVE-2025-4782.md): SourceCodester/oretnom23 Stock Management System view\_receiving sql injection (CVSS 5.3)
- [CVE-2025-4283](https://cve.now/CVE-2025-4283.md): SourceCodester/oretnom23 Stock Management System Login.php sql injection (CVSS 6.9)
- [CVE-2025-4282](https://cve.now/CVE-2025-4282.md): SourceCodester/oretnom23 Stock Management System Users.php cross-site request forgery (CVSS 5.3)
- [CVE-2025-4267](https://cve.now/CVE-2025-4267.md): SourceCodester/oretnom23 Stock Management System Purchase Order Details Page view\_po sql injection (CVSS 5.1)
- [CVE-2025-3045](https://cve.now/CVE-2025-3045.md): oretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php sql injection (CVSS 5.3)
- [CVE-2024-5385](https://cve.now/CVE-2024-5385.md): oretnom23 Online Car Wash Booking System cross site scripting (CVSS 5.1)
- [CVE-2022-3015](https://cve.now/CVE-2022-3015.md): oretnom23 Fast Food Ordering System cross site scripting (CVSS 3.5)
- [CVE-2022-3012](https://cve.now/CVE-2022-3012.md): oretnom23 Fast Food Ordering System index.php sql injection (CVSS 6.3)
- [CVE-2022-2686](https://cve.now/CVE-2022-2686.md): oretnom23 Fast Food Ordering System Menu List Page cross site scripting (CVSS 3.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/oretnom23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.