CVE-2022-28607

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

CVE-2022-28607

CVE-2022-28607 concerns an information disclosure in the asith-eranga ISIC tour booking software. The issue arises in the endpoint "/system/user/modules/mod_users/controller.php" where an attacker can potentially obtain sensitive information through the action parameter. Affected software version...