Lucene search
+L

5 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/15 12:00 a.m.•3 views

CVE-2025-9008: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/smssetting.php. The manipulation of the argument uname leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:00 a.m.•13 views

CVE-2024-6471

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

8.8CVSS7.5AI score0.00599EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/07/03 1:31 p.m.•42 views

CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

6.5CVSS0.00599EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/07/03 1:31 p.m.•31 views

CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

6.5CVSS7.4AI score0.00599EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/03 12:00 a.m.•5 views

CVE-2024-6471: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

8.8CVSS6.4AI score0.00599EPSS
SaveExploits1References1
Rows per page
Query Builder