PT-2021-16457

Name of the Vulnerable Software and Affected Versions: SourceCodester Travel Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via file upload to the "updatepackage.php" endpoint. This enables arbitrary file upload, potentially leading to code...

CVE-2021-25208: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php...

CVE-2021-25213

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

CVE-2021-25213: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

PT-2021-16461

Name of the Vulnerable Software and Affected Versions: SourceCodester Travel Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL statements via the catid parameter to "subcat.php" API endpoint. This enables attackers to manipulate database queries...