Lucene search
+L

470 matches found

NVD
NVD
added 2024/10/15 9:15 p.m.32 views

CVE-2024-48411

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection SQLI via a crafted payload to the val-email parameter in forgetpassword.php...

9.8CVSS0.00531EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/15 12:00 a.m.10 views

CVE-2024-48411

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection SQLI via a crafted payload to the val-email parameter in forgetpassword.php...

8.2AI score0.00531EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/10/15 12:00 a.m.10 views

PT-2024-33100 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tours and Travels Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability. This vulnerability can be exploited via a crafted payload to the val-email parameter in the forget...

9.8CVSS7.4AI score0.00531EPSS
SaveExploits1References6
CVE
CVE
added 2024/10/15 12:00 a.m.75 views

CVE-2024-48411

CVE-2024-48411 affects itsourcecode Online Tours and Travels Management System v1.0. A SQL Injection vulnerability exists in the forget_password.php flow, exploitable via a crafted payload to the val-email parameter. The linked documents consistently name SQLi as the issue and identify the vulner...

9.8CVSS8AI score0.00531EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/10/15 12:00 a.m.35 views

CVE-2024-48411

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection SQLI via a crafted payload to the val-email parameter in forgetpassword.php...

0.00531EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/04 7:15 p.m.8 views

CVE-2024-46077

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...

5.4CVSS5.8AI score0.00276EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/04 7:15 p.m.20 views

CVE-2024-46077

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...

5.4CVSS0.00276EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/04 12:00 a.m.75 views

CVE-2024-46077

The CVE-2024-46077 entry pertains to itsourcecode Online Tours and Travels Management System v1.0, where a Cross Site Scripting (XSS) vulnerability is triggered via crafted input to the travellers.php parameters val-username, val-email, val-suggestions, val-digits, and state_name. The root cause ...

5.4CVSS6.1AI score0.00276EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/04 12:00 a.m.12 views

CVE-2024-46077

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...

5.9AI score0.00276EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/04 12:00 a.m.10 views

itsourcecode Online Tours and Travels Management System 安全漏洞

itsourcecode Online Tours and Travels Management System is an online travel management system from itsourcecode open source. A security vulnerability exists in itsourcecode Online Tours and Travels Management System v1.0. An attacker can exploit this vulnerability by sending a specially crafted...

5.4CVSS6.7AI score0.00276EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/10/04 12:00 a.m.27 views

CVE-2024-46077

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...

0.00276EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/04 12:00 a.m.25 views

PT-2024-31896 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tours and Travels Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS that can be triggered by sending a crafted payload to specific parameters in the travellers.php file. The...

5.4CVSS6.1AI score0.00276EPSS
SaveExploits0References6
Packet Storm
Packet Storm
added 2024/09/09 12:00 a.m.208 views

Online Tours and Travels Management System 1.0 Insecure Settings

============================================================================================================================================= | Title : Online Tours and Travels Management System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser...

7.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/07/23 7:59 a.m.9 views

centurytours.com.xx3.kz Cross Site Scripting vulnerability OBB-3949172

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2024/07/03 2:15 p.m.21 views

CVE-2024-6471

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

8.8CVSS0.00599EPSS
SaveExploits1References4
OSV
OSV
added 2024/07/03 2:15 p.m.8 views

CVE-2024-6471

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

8.8CVSS6.4AI score0.00599EPSS
SaveExploits1References4
CVE
CVE
added 2024/07/03 1:31 p.m.56 views

CVE-2024-6471

CVE-2024-6471 affects SourceCodester Online Tours & Travels Management 1.0, specifically the sms_setting.php file. The vulnerability is caused by manipulation of the uname parameter, resulting in an SQL injection that can be exploited remotely. Public disclosures exist, indicating exploitation is...

8.8CVSS7.2AI score0.00599EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/07/03 1:31 p.m.38 views

CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

6.5CVSS0.00599EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/07/03 1:31 p.m.20 views

CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

6.5CVSS7.4AI score0.00599EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/07/03 12:00 a.m.5 views

Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online tours management system developed by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version 1.0, which stems from an incorrect operation of the parameter uname that can lead to...

8.8CVSS8AI score0.00599EPSS
SaveExploits1References5
Rows per page
Query Builder