CVE-2024-48411

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection SQLI via a crafted payload to the val-email parameter in forgetpassword.php...

CVE-2023-0515 SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/forgetpassword.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. T...

CVE-2023-0515

SourceCodester Online Tours & Travels Management System 1.0 has a SQL injection vulnerability in the admin/forget_password.php handling of the email parameter. The issue is exploitable and was publicly disclosed (VDB-219335). Root cause is improper handling/manipulation of the email argument lead...