Lucene search
+L

138 matches found

zdt
zdt
•added 2024/02/20 12:00 a.m.•282 views

Tourism Management System 2.0 Shell Upload Vulnerability

Exploit Title: Tourism Management System v2.0 - Arbitrary File Upload Exploit Author: SoSPiro Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/tourism-management-system-free-download/ Version: 2.0 Tested on: Windows 10 Pro Impact: Allows admin to upload all files to t...

7.4AI score
SaveExploits0
NVD
NVD
•added 2022/06/14 5:15 p.m.•22 views

CVE-2022-30930

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

4.3CVSS0.0045EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/14 5:15 p.m.•13 views

CVE-2022-30930

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

4.3CVSS5.8AI score0.0045EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/14 5:15 p.m.•8 views

CVE-2022-30930

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

4.3CVSS5.8AI score0.0045EPSS
SaveExploits1References4
Prion
Prion
•added 2022/06/14 5:15 p.m.•23 views

Cross site request forgery (csrf)

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

4.3CVSS4.8AI score0.0045EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/06/14 4:08 p.m.•74 views

CVE-2022-30930

CVE-2022-30930 concerns the Tourism Management System, version V 3.2, with a Cross-Site Request Forgery (CSRF) vulnerability. Reported in multiple sources, the flaw could allow an attacker to alter user-profile details (e.g., username, phone number) by tricking an authenticated user into submitti...

4.3CVSS4.7AI score0.0045EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/14 4:08 p.m.•36 views

CVE-2022-30930

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

5.1AI score0.0045EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/14 12:00 a.m.•18 views

Tourism Management System 跨站请求伪造漏洞

Tourism Management System is a website builder for tourism management. A cross-site request forgery vulnerability exists in Tourism Management System v3.2, which can be exploited by an attacker to change the details of any user profile, such as username, phone number, etc. The vulnerability is...

4.3CVSS5.5AI score0.0045EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•4 views

CVE-2022-30930: Cross-Site Request Forgery (CSRF)

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

4.3CVSS5.5AI score0.0045EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/14 12:00 a.m.•13 views

PT-2022-20391 · Unknown · Tourism Management System

Name of the Vulnerable Software and Affected Versions: Tourism Management System version V 3.2 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Tourism...

4.3CVSS4.5AI score0.0045EPSS
SaveExploits1References5
CNVD
CNVD
•added 2020/11/18 12:00 a.m.•13 views

SourceCodester Tourism Management System Arbitrary File Upload Vulnerability

SourceCodester Tourism Management System is a website builder for tourism management from SourceCodester. SourceCodester Tourism Management System has an arbitrary file upload vulnerability that can be exploited for remote code execution via the admin create-package.php vulnerability page...

8.8CVSS8AI score0.03068EPSS
SaveExploits1References1
OSV
OSV
•added 2020/11/17 8:15 p.m.•11 views

CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

8.8CVSS7.8AI score0.03068EPSS
SaveExploits1References2
NVD
NVD
•added 2020/11/17 8:15 p.m.•24 views

CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

8.8CVSS9AI score0.03068EPSS
SaveExploits1References2
Prion
Prion
•added 2020/11/17 8:15 p.m.•25 views

Remote code execution

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

6.5CVSS8.9AI score0.03068EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2020/11/17 7:06 p.m.•72 views

CVE-2020-28136

SourceCodester Tourism Management System 1.0 is affected by an Arbitrary File Upload vulnerability that enables remote code execution through the admin/create-package.php page. The root cause is the ability to upload executable files, allowing an attacker to gain control of the system. Public ref...

8.8CVSS8.9AI score0.03068EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/11/17 7:06 p.m.•37 views

CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

9AI score0.03068EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/17 12:00 a.m.•2 views

CVE-2020-28136: Unrestricted Upload of File with Dangerous Type

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

8.8CVSS6.2AI score0.03068EPSS
SaveExploits1References2
Exploit DB
Exploit DB
•added 2020/10/19 12:00 a.m.•441 views

Tourism Management System 1.0 - Arbitrary File Upload

Exploit Title: Tourism Management System 1.0 - Arbitrary File Upload Date: 2020-10-19 Exploit Author: Ankita Pal & Saurav Shukla Vendor Homepage: https://phpgurukul.com/tourism-management-system-free-download/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=7204 Version: V1...

5.3AI score
SaveExploits0
Rows per page
Query Builder