Lucene search
K

22 matches found

CNNVD
CNNVD
added 2026/06/01 12:0 a.m.7 views

Code-Projects Hotel and Tourism Reservation System SQL注入漏洞

The Code-Projects Hotel and Tourism Reservation System is an open-source hotel and tourism reservation system developed by Code-Projects. Version 1.0 of the Code-Projects Hotel and Tourism Reservation System contains a SQL injection vulnerability. This vulnerability arises from an unknown functio...

7.5CVSS7.5AI score0.00318EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-24947

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00387EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-28819

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.005EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-24946

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00387EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-24951

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00387EPSS
Exploits1References5
CVE
CVE
added 2025/08/25 11:2 p.m.15 views

CVE-2025-9426

CVE-2025-9426 affects itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is a SQL injection in an unknown part of the file /package.php triggered by manipulating the subcatid parameter. Exploitation is network-based and can be performed remotely; several sources note tha...

9.8CVSS7.4AI score0.00387EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/08/25 11:2 p.m.12 views

CVE-2025-9425

The CVE-2025-9425 entry concerns itsourcecode Online Tour and Travel Management System v1.0. The vulnerability is described as a SQL injection in the /enquiry.php file caused by manipulating the pid parameter, with remote exploitation reportedly possible and the exploit publicly released. Multipl...

9.8CVSS7.5AI score0.00387EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/19 7:2 p.m.2 views

CVE-2025-9154 itsourcecode Online Tour and Travel Management System page-login.php sql injection

A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /user/page-login.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been published and m...

7.5CVSS7.6AI score0.005EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.1 views

itsourcecode Online Tour and Travel Management System 安全漏洞

itsourcecode Online Tour and Travel Management System is a itsourcecode open source online tour and travel management system. A security vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which is caused by a SQL injection due to incorrect manipulation o...

9.8CVSS7.7AI score0.005EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/08/16 5:25 p.m.4 views

CVE-2025-8970

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/booking.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

9.8CVSS7.7AI score0.00387EPSS
Exploits1References1
NVD
NVD
added 2025/08/15 5:15 a.m.7 views

CVE-2025-9009

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/emailsetup.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

9.8CVSS0.00387EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/08/15 4:32 a.m.10 views

CVE-2025-9009 itsourcecode Online Tour and Travel Management System email_setup.php sql injection

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/emailsetup.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

7.5CVSS0.00387EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/08/15 12:0 a.m.8 views

PT-2025-33425 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System 1.0, specifically within the /admin/expense report.php file. Manipulation of...

9.8CVSS7.5AI score0.00387EPSS
Exploits1References10
CVE
CVE
added 2025/08/14 9:32 p.m.15 views

CVE-2025-8984

CVE-2025-8984 affects itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is in an unknown function within /admin/operations/expense_category.php, where manipulating the expense_name argument leads to SQL injection. It can be exploited remotely, and public exploits have b...

9.8CVSS7.6AI score0.00387EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/08/14 9:2 p.m.25 views

CVE-2025-8983

The CVE-2025-8983 entry concerns itsourcecode Online Tour and Travel Management System 1.0. A SQL injection vulnerability exists in /admin/operations/expense.php via the expense_for parameter. Exploitation is possible remotely, and public exploits have been disclosed. Connected sources corroborat...

9.8CVSS7.6AI score0.00387EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/08/14 5:2 p.m.16 views

CVE-2025-8970

CVE-2025-8970 affects itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is in the file /admin/operations/booking.php, where manipulation of the ID parameter enables an SQL injection. The issue is exploitable remotely, with public disclosure of the exploit noted in multi...

9.8CVSS7.6AI score0.00387EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/08/14 4:15 p.m.0 views

CVE-2025-8967

A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/packages.php. The manipulation of the argument pname leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

9.8CVSS5.7AI score
Exploits0References5
CVE
CVE
added 2025/08/14 4:2 p.m.15 views

CVE-2025-8967

The CVE-2025-8967 entry concerns itsourcecode Online Tour and Travel Management System 1.0. A SQL injection flaw exists in the file /admin/operations/packages.php, caused by manipulating the pname argument in an unknown function. This vulnerability allows remote exploitation (attack vector: netwo...

9.8CVSS7.6AI score0.00387EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/14 3:32 p.m.12 views

CVE-2025-8966 itsourcecode Online Tour and Travel Management System tax.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/tax.php. The manipulation of the argument tname leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00387EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.4 views

PT-2025-33412 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System version 1.0. The manipulation of the payment type argument in the...

9.8CVSS7.6AI score0.00387EPSS
Exploits1References9
Rows per page
Query Builder