Lucene search
+L

470 matches found

CNNVD
CNNVD
added 2022/10/18 12:00 a.m.6 views

Online Tours & Travels Management System 代码问题漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A security vulnerability exists in Online Tours & Travels Management System v1.0, which was discovered to contain an arbitrary file upload vulnerability via the component...

7.2CVSS7.6AI score0.01143EPSS
SaveExploits1References2
NVD
NVD
added 2022/10/17 9:15 p.m.23 views

CVE-2022-42142

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/updatesettings.php...

7.2CVSS0.01119EPSS
SaveExploits1References1
OSV
OSV
added 2022/10/17 9:15 p.m.12 views

CVE-2022-42142

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/updatesettings.php...

7.2CVSS6.2AI score0.01119EPSS
SaveExploits1References1
Prion
Prion
added 2022/10/17 9:15 p.m.17 views

Code injection

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/updatesettings.php...

5.8CVSS7.2AI score0.01119EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/10/17 12:00 a.m.9 views

Online Tours & Travels Management System 安全漏洞

Online Tours & Travels Management System is an online tours management system by Mayuri K. Individual developer. A security vulnerability exists in Online Tours & Travels Management System v1.0, which can be exploited to achieve arbitrary code execution via its...

7.2CVSS7.8AI score0.01119EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/10/17 12:00 a.m.7 views

CVE-2022-42142

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/updatesettings.php...

7.4AI score0.01119EPSS
SaveExploits1References1
CVE
CVE
added 2022/10/17 12:00 a.m.64 views

CVE-2022-42142

CVE-2022-42142 affects Online Tours & Travels Management System v1.0. The vulnerability is an arbitrary code execution via the endpoint ip/tour/admin/operations/update_settings.php. Connected records indicate a PoC exists and a CVSSv3.1 base score of 7.2 (HIGH) with network attack vector, low att...

7.2CVSS7.2AI score0.01119EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/10/17 12:00 a.m.31 views

CVE-2022-42142

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/updatesettings.php...

7.5AI score0.01119EPSS
SaveExploits1References1
NVD
NVD
added 2022/10/14 8:15 p.m.24 views

CVE-2022-41416

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/updatebooking.php...

7.2CVSS0.00762EPSS
SaveExploits1References1
Prion
Prion
added 2022/10/14 8:15 p.m.19 views

Sql injection

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/updatebooking.php...

5.8CVSS7.2AI score0.00762EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/14 12:00 a.m.8 views

CVE-2022-41416

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/updatebooking.php...

7.2AI score0.00762EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/10/14 12:00 a.m.10 views

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates from a SQL injection point in the id parameter in /user/updatebooking.php...

7.2CVSS7.3AI score0.00762EPSS
SaveExploits1References2
CVE
CVE
added 2022/10/14 12:00 a.m.59 views

CVE-2022-41416

CVE-2022-41416: The Online Tours & Travels Management System v1.0 has a SQL injection vulnerability exploit via the id parameter in /user/update_booking.php. Affects the system’s booking update endpoint; attacker-controlled id can lead to unauthorized data access and potential data integrity impa...

7.2CVSS7.2AI score0.00762EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/10/14 12:00 a.m.27 views

CVE-2022-41416

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/updatebooking.php...

7.5AI score0.00762EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/10/14 12:00 a.m.12 views

PT-2022-25853 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/user/update booking.php" API endpoint. Recommendations:...

7.2CVSS7.2AI score0.00762EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/09/29 12:00 a.m.30 views

Online Tours

Online Tours & Travels Management System is an online travel management system developed by Mayuri K. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates in /admin/up booking.php parameter lacks validation for external input SQL statements. An...

7.2CVSS4.7AI score0.00861EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/29 12:00 a.m.64 views

Online Tours

Online Tours & Travels Management System is an online travel management system developed by Mayuri K. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates from /admin/update The id parameter of traveller.php lacks validation for external input SQ...

7.2CVSS4.7AI score0.00762EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/29 12:00 a.m.23 views

Online Tours

Online Tours & Travels Management System is an online travel management system developed by Mayuri K. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates from /admin/update The booking.php id parameter lacks validation for external input SQL...

7.2CVSS4.7AI score0.00861EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/28 12:00 a.m.54 views

Online Tours & Travels Management System update_tax.php SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which stems from a lack of validation of externally-entered SQL statements in the id parameter of...

7.2CVSS6.9AI score0.00914EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/28 12:00 a.m.46 views

Online Tours & Travels Management System update_currency.php SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K Personal Developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version v1.0 due to a lack of validation of externally-entered SQL statements in the id parameter of its...

7.2CVSS7.1AI score0.00896EPSS
SaveExploits1References1
Rows per page
Query Builder