2 matches found
Sql injection
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/addpayment.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. T...
5.8CVSS6.9AI score0.00564EPSS
SaveExploits1References3Affected Software1
CVE-2023-0529
CVE-2023-0529 affects SourceCodester Online Tours & Travels Management System 1.0. The vulnerability resides in the admin/add_payment.php file, where manipulation of the id parameter leads to an SQL Injection. Exploitation can be performed remotely, and multiple sources indicate the exploit has b...
6.3CVSS6.1AI score0.00564EPSS
SaveExploits1References3Affected Software1
20