CVE-2025-8966: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/tax.php. The manipulation of the argument tname leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2022-32992: Improper Neutralization of Special Elements used in an SQL Command

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

PT-2022-21626

Name of the Vulnerable Software and Affected Versions Online Tours And Travels Management System version 1.0 Description A SQL injection issue was found in the tname parameter at the "/admin/operations/tax.php" API endpoint. Recommendations For Online Tours And Travels Management System version...