CVE-2025-11103: Unrestricted Upload of File with Dangerous Type

A security vulnerability has been detected in Projectworlds Online Tours and Travels 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be initiated remotel...

CVE-2025-4156: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-image.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-18374

Name of the Vulnerable Software and Affected Versions PHPGurukul Boat Booking System version 1.0 Description A critical vulnerability has been found in the PHPGurukul Boat Booking System. This issue affects unknown code of the file /admin/change-image.php. The manipulation of the argument ID lead...

PT-2024-39861

Name of the Vulnerable Software and Affected Versions Codezips Tourist Management System version 1.0 Description A critical issue affects some unknown functionality of the file /admin/change-image.php, where the manipulation of the packageimage argument leads to unrestricted upload. The attack ca...

CVE-2024-9816: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be launched remotely...