CVE-2025-5282

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletepackage function in all versions up to, and including, 6.5.1. This makes it possible for unauthenticated attackers to...

CVE-2022-28412

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

CVE-2024-7668 SourceCodester Car Driving School Management System Master.php delete_package sql injection

A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affects the function deletepackage of the file Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...