CVE-2025-9426

CVE-2025-9426 affects itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is a SQL injection in an unknown part of the file /package.php triggered by manipulating the subcatid parameter. Exploitation is network-based and can be performed remotely; several sources note tha...

CVE-2022-30402

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managesubcategory&id=...