CVE-2025-9426

creationtimestamp| type| source ---|---|--- 2025-08-26 02:59:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbjhdlccz2v...

CVE-2025-9426 itsourcecode Online Tour and Travel Management System package.php sql injection

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...