470 matches found
CVE-2024-48411
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection SQLI via a crafted payload to the val-email parameter in forgetpassword.php...
CVE-2024-48411
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection SQLI via a crafted payload to the val-email parameter in forgetpassword.php...
PT-2024-33100 · Unknown · Sourcecodester Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tours and Travels Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability. This vulnerability can be exploited via a crafted payload to the val-email parameter in the forget...
CVE-2024-48411
CVE-2024-48411 affects itsourcecode Online Tours and Travels Management System v1.0. A SQL Injection vulnerability exists in the forget_password.php flow, exploitable via a crafted payload to the val-email parameter. The linked documents consistently name SQLi as the issue and identify the vulner...
CVE-2024-48411
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection SQLI via a crafted payload to the val-email parameter in forgetpassword.php...
CVE-2024-46077
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...
CVE-2024-46077
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...
CVE-2024-46077
The CVE-2024-46077 entry pertains to itsourcecode Online Tours and Travels Management System v1.0, where a Cross Site Scripting (XSS) vulnerability is triggered via crafted input to the travellers.php parameters val-username, val-email, val-suggestions, val-digits, and state_name. The root cause ...
CVE-2024-46077
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...
itsourcecode Online Tours and Travels Management System 安全漏洞
itsourcecode Online Tours and Travels Management System is an online travel management system from itsourcecode open source. A security vulnerability exists in itsourcecode Online Tours and Travels Management System v1.0. An attacker can exploit this vulnerability by sending a specially crafted...
CVE-2024-46077
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...
PT-2024-31896 · Unknown · Sourcecodester Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tours and Travels Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS that can be triggered by sending a crafted payload to specific parameters in the travellers.php file. The...
Online Tours and Travels Management System 1.0 Insecure Settings
============================================================================================================================================= | Title : Online Tours and Travels Management System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser...
centurytours.com.xx3.kz Cross Site Scripting vulnerability OBB-3949172
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-6471
A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
CVE-2024-6471
A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
CVE-2024-6471
CVE-2024-6471 affects SourceCodester Online Tours & Travels Management 1.0, specifically the sms_setting.php file. The vulnerability is caused by manipulation of the uname parameter, resulting in an SQL injection that can be exploited remotely. Public disclosures exist, indicating exploitation is...
CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
Online Tours & Travels Management System SQL Injection Vulnerability
Online Tours & Travels Management System is an online tours management system developed by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version 1.0, which stems from an incorrect operation of the parameter uname that can lead to...