3 matches found
CVE-2021-25208: Unrestricted Upload of File with Dangerous Type
Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php...
9.8CVSS6.5AI score0.01874EPSS
SaveExploits1References2
CVE-2021-25213
SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...
10AI score0.01476EPSS
SaveExploits1References1
CVE-2021-25213: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...
9.8CVSS6.4AI score0.01476EPSS
SaveExploits1References2
20