Lucene search
China National Vulnerability DatabaseCNVD-2022-88279HistorySep 28, 2022 - 12:00 a.m.
Online Tours
2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
online tours
travels management system
sql injection
mayuri k
validation
update tax
attacker
sensitive database information
cnvd
EPSS
0.001
Percentile
37.7%
Online Tours & Travels Management System is an online travel management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which stems from a missing validation of externally entered SQL statements in the id parameter of the /tour/admin/update_tax.php file. An attacker could use the vulnerability to obtain sensitive database information.
Related
prion
prion
Sql injection
2022-09-23 14:15:00
cvelist
cvelist
CVE-2022-40093
2022-09-23 13:46:05
nvd
nvd
CVE-2022-40093
2022-09-23 14:15:13
cve
cve
CVE-2022-40093
2022-09-23 14:15:13