542 matches found
CVE-2022-40092
Online Tours & Travels Management System v1.0 contains a SQL injection in the id parameter of /tour/admin/update_payment.php. The issue is a missing input validation in that endpoint, enabling an attacker to manipulate SQL queries and potentially access sensitive data. Documented CVSS v3.1 base s...
CVE-2022-40092
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/updatepayment.php...
CVE-2022-40091
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/updatepackages.php...
CVE-2022-40091
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/updatepackages.php...
CVE-2022-40091
CVE-2022-40091 affects Online Tours & Travels Management System v1.0. The vulnerability is a SQL injection in the id parameter of /tour/admin/update_packages.php, caused by lack of validation of externally entered SQL statements. Impact reported across sources: potential disclosure of sensitive d...
PT-2022-25197 · Unknown · Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/tour/admin/update payment.php" API endpoint...
CVE-2022-40091: Improper Neutralization of Special Elements used in an SQL Command
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/updatepackages.php...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which stems from a lack of validation of externally-entered SQL statements in the id parameter of...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates from a lack of validation of externally entered SQL statements in the id paramete...
CVE-2022-40092: Improper Neutralization of Special Elements used in an SQL Command
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/updatepayment.php...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which stems from a lack of validation of externally-entered SQL statements in the id parameter of...
PT-2022-25198 · Unknown · Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/tour/admin/update tax.php" API endpoint. Recommendation...
CVE-2022-40093: Improper Neutralization of Special Elements used in an SQL Command
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/updatetax.php...
ivanmeyertours.ch Cross Site Scripting vulnerability OBB-2826764
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-35421
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...
CVE-2022-35421
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...
CVE-2022-35421
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...
Sql injection
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...
CVE-2022-35421
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...
CVE-2022-35421
CVE-2022-35421 affects Online Tours And Travels Management System v1.0. The vulnerability is a SQL injection in the pname parameter of the /admin/operations/packages.php endpoint. Root cause: improper handling of input leading to SQL injection. Documented impact in CVSS: high across confidentiali...