CVE-2025-8981

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/payment.php. The manipulation of the argument paymenttype leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-8981 itsourcecode Online Tour and Travel Management System payment.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/payment.php. The manipulation of the argument paymenttype leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-8981

The CVE-2025-8981 entry concerns itsourcecode Online Tour and Travel Management System 1.0. A SQL injection flaw exists in the /admin/operations/payment.php file, caused by unsafely handling the payment_type parameter. The vulnerability is remotely exploitable and has publicly disclosed exploits....

Malicious code in payment_service_client (npm)

The package paymentserviceclient was found to contain malicious code...

Malicious code in op-payment-widget-v3 (npm)

The package op-payment-widget-v3 was found to contain malicious code...

MAL-2025-28257 Malicious code in op-payment-account (npm)

The package op-payment-account was found to contain malicious code...

MAL-2025-28943 Malicious code in payment-methods-component (npm)

The package payment-methods-component was found to contain malicious code...

MAL-2025-32787 Malicious code in schibsted-payment-sdk (npm)

The package schibsted-payment-sdk was found to contain malicious code...

MAL-2025-7984 Malicious code in @ginger-team/payment-form (npm)

The package @ginger-team/payment-form was found to contain malicious code...

Malicious code in op-payment-live-validation (npm)

The package op-payment-live-validation was found to contain malicious code...

Malicious code in payment-methods-component (npm)

The package payment-methods-component was found to contain malicious code...

MAL-2025-28259 Malicious code in op-payment-widget-v3 (npm)

The package op-payment-widget-v3 was found to contain malicious code...

MAL-2025-28258 Malicious code in op-payment-live-validation (npm)

The package op-payment-live-validation was found to contain malicious code...

MAL-2025-28944 Malicious code in payment_service_client (npm)

The package paymentserviceclient was found to contain malicious code...

Malicious code in @ginger-team/payment-form (npm)

The package @ginger-team/payment-form was found to contain malicious code...

Malicious code in paymaya-payment-js-sdk (npm)

The package paymaya-payment-js-sdk was found to contain malicious code...

Malicious code in op-payment-account (npm)

The package op-payment-account was found to contain malicious code...

Malicious code in schibsted-payment-sdk (npm)

The package schibsted-payment-sdk was found to contain malicious code...

MAL-2025-28942 Malicious code in paymaya-payment-js-sdk (npm)

The package paymaya-payment-js-sdk was found to contain malicious code...

PT-2025-33412 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System version 1.0. The manipulation of the payment type argument in the...