CVE-2022-40091

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/updatepackages.php...

CVE-2022-40091

CVE-2022-40091 affects Online Tours & Travels Management System v1.0. The vulnerability is a SQL injection in the id parameter of /tour/admin/update_packages.php, caused by lack of validation of externally entered SQL statements. Impact reported across sources: potential disclosure of sensitive d...