CVE-2021-25208

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php...

SourceCodester Travel Management System File Upload Vulnerability

SourceCodester Travel Management System is a software application. An automated system designed to help customers easily check their parcel details while helping travel companies track packages online. A file upload vulnerability exists in SourceCodester Travel Management System v1.0, which can b...

PT-2021-16457

Name of the Vulnerable Software and Affected Versions: SourceCodester Travel Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via file upload to the "updatepackage.php" endpoint. This enables arbitrary file upload, potentially leading to code...

SourceCodester Travel Management System code-related vulnerabilities

SourceCodester Travel Management System is a software application. An automated system designed to help customers easily check their parcel details while helping travel companies track packages online. A file upload vulnerability exists in SourceCodester Travel Management System v1.0, which can b...

CVE-2021-25208: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php...

CVE-2021-25213

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

CVE-2021-25213: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

PT-2021-16461

Name of the Vulnerable Software and Affected Versions: SourceCodester Travel Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL statements via the catid parameter to "subcat.php" API endpoint. This enables attackers to manipulate database queries...