CVE-2024-9816

Codezips Tourist Management System 1.0 contains a vulnerability in /admin/change-image.php where the packageimage parameter allows unrestricted file upload. Exploitation is remotely possible and the exploit has been disclosed publicly. The issue is documented across CVE-2024-9816 entries (NVD/Red...

CVE-2024-9815

Codezips Tourist Management System 1.0 contains a vulnerability in /admin/create-package.php where the packageimage parameter enables unrestricted file uploads. Multiple connected sources confirm remote, unauthenticated-like exposure via this parameter, with the issue described as critical. Pract...