CVE-2025-57642

Tourism Management System 2.0 (v2.0) is vulnerable to a Shell Upload vulnerability (CWE-434) that allows an attacker to upload and execute arbitrary PHP shell scripts on the server. Successful exploitation leads to remote code execution (RCE), unauthorized system access, and potential compromise ...