CVE-2025-9426 itsourcecode Online Tour and Travel Management System package.php sql injection

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...

CVE-2022-48554 affecting package file for versions less than 5.40-3

CVE-2022-48554 affecting package file for versions less than 5.40-3. A patched version of the package is available...

Arbitrary Code Execution

Overview Affected versions of this package are vulnerable to Arbitrary Code Execution via the extract and files methods of the RPM::File. Exploiting this vulnerability is possible when using RPM::Filefiles and RPM::Fileextract methods with a malicious payload compressor field in the RPM...