CVE-2024-1822

A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

Cross site scripting

A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2024-1822

The CVE-2024-1822 entry concerns PHPGurukul Tourism Management System 1.0. Affected is an unknown function in user-bookings.php where manipulating the Full Name argument triggers cross-site scripting. Attacks can be launched remotely and the exploit has been disclosed publicly. Details across con...

CVE-2024-1822 PHPGurukul Tourism Management System user-bookings.php cross site scripting

A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2024-1822 PHPGurukul Tourism Management System user-bookings.php cross site scripting

A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

Tourism Management System Cross-Site Scripting Vulnerability

Tourism Management System is an American website builder for tourism management. A cross-site scripting vulnerability exists in Tourism Management System version 1.0, which stems from the parameter Full Name in the file user-bookings.php that causes cross-site scripting...

Tourism Management System 2.0 Shell Upload Vulnerability

Exploit Title: Tourism Management System v2.0 - Arbitrary File Upload Exploit Author: SoSPiro Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/tourism-management-system-free-download/ Version: 2.0 Tested on: Windows 10 Pro Impact: Allows admin to upload all files to t...

CVE-2022-30930

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

CVE-2022-30930

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

CVE-2022-30930

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

Cross site request forgery (csrf)

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

CVE-2022-30930

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery CSRF...

CVE-2022-30930

CVE-2022-30930 concerns the Tourism Management System, version V 3.2, with a Cross-Site Request Forgery (CSRF) vulnerability. Reported in multiple sources, the flaw could allow an attacker to alter user-profile details (e.g., username, phone number) by tricking an authenticated user into submitti...

Tourism Management System 跨站请求伪造漏洞

Tourism Management System is a website builder for tourism management. A cross-site request forgery vulnerability exists in Tourism Management System v3.2, which can be exploited by an attacker to change the details of any user profile, such as username, phone number, etc. The vulnerability is...

PT-2022-20391 · Unknown · Tourism Management System

Name of the Vulnerable Software and Affected Versions: Tourism Management System version V 3.2 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Tourism...

SourceCodester Tourism Management System Arbitrary File Upload Vulnerability

SourceCodester Tourism Management System is a website builder for tourism management from SourceCodester. SourceCodester Tourism Management System has an arbitrary file upload vulnerability that can be exploited for remote code execution via the admin create-package.php vulnerability page...

CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

Remote code execution

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...