3 matches found
CVE-2022-40353
CVE-2022-40353 affects Online Tours & Travels Management System v1.0. The vulnerability is a SQL injection via the id parameter at /admin/up_booking.php ; the issue stems from unvalidated external input. CVSSv3.1 base metrics indicate a HIGH impact with NETWORK attack vector, LOW attack complexit...
7.2CVSS7.2AI score0.00878EPSS
SaveExploits1References1Affected Software1
20