Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Online Tours & Travels Management System ProjectOnline Tours & Travels Management System1.0

28 matches found

CVE
CVE•added 2023/01/28 5:15 p.m.•95 views

CVE-2023-0560

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. This issue affects some unknown processing of the file admin/practice_pdf.php. The manipulation of the argument id leads to sql injection. The attack may be initiated re...

7.2CVSS6.1AI score0.0005EPSS
CVE
CVE•added 2023/01/26 9:18 p.m.•75 views

CVE-2023-0516

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file user/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The e...

7.2CVSS6.5AI score0.00318EPSS
CVE
CVE•added 2023/01/27 11:15 a.m.•75 views

CVE-2023-0529

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/add_payment.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

6.3CVSS6.1AI score0.00054EPSS
CVE
CVE•added 2023/01/26 9:18 p.m.•69 views

CVE-2023-0515

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. Th...

7.2CVSS6.5AI score0.0024EPSS
CVE
CVE•added 2023/01/27 11:15 a.m.•68 views

CVE-2023-0534

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file admin/expense_report.php. The manipulation of the argument to_date leads to sql injection. It is possible to initiate the attack remo...

5.8CVSS5.2AI score0.00046EPSS
CVE
CVE•added 2023/01/28 5:15 p.m.•66 views

CVE-2023-0561

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file /user/s.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

8.8CVSS7.8AI score0.00053EPSS
CVE
CVE•added 2022/09/26 9:15 p.m.•52 views

CVE-2022-40099

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense_category.php.

7.2CVSS7.2AI score0.00086EPSS
CVE
CVE•added 2023/01/27 11:15 a.m.•51 views

CVE-2023-0530

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/approve_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. T...

9.8CVSS7.4AI score0.00047EPSS
CVE
CVE•added 2022/09/26 9:15 p.m.•48 views

CVE-2022-40098

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense.php.

7.2CVSS7.2AI score0.00086EPSS
CVE
CVE•added 2023/01/27 11:15 a.m.•48 views

CVE-2023-0528

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The explo...

6.3CVSS6AI score0.00054EPSS
CVE
CVE•added 2023/01/29 6:15 p.m.•48 views

CVE-2023-0570

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file user\operations\payment_operation.php. The manipulation of the argument booking_id leads to sql injection. It is possible to initiate...

9.8CVSS8.3AI score0.00052EPSS
CVE
CVE•added 2022/11/03 8:15 p.m.•44 views

CVE-2022-43061

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /operations/travellers.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

7.2CVSS7.3AI score0.00088EPSS
CVE
CVE•added 2022/09/27 11:15 p.m.•43 views

CVE-2022-40354

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_booking.php.

7.2CVSS7.2AI score0.00086EPSS
CVE
CVE•added 2023/03/23 8:15 a.m.•43 views

CVE-2023-1589

A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This vulnerability affects the function exec of the file admin/operations/approve_delete.php. The manipulation of the argument id leads to sql injection. The attack can be initi...

9.8CVSS8.2AI score0.00053EPSS
CVE
CVE•added 2022/09/27 11:15 p.m.•42 views

CVE-2022-40353

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/up_booking.php.

7.2CVSS7.2AI score0.00086EPSS
CVE
CVE•added 2022/11/28 3:15 p.m.•42 views

CVE-2022-44401

Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.

9.8CVSS9.4AI score0.00083EPSS
CVE
CVE•added 2022/10/18 3:15 p.m.•40 views

CVE-2022-41537

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /user_operations/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

7.2CVSS7.3AI score0.00106EPSS
CVE
CVE•added 2023/01/16 3:15 p.m.•40 views

CVE-2023-0324

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/page-login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remot...

9.8CVSS8.8AI score0.02332EPSS
CVE
CVE•added 2023/01/27 11:15 a.m.•39 views

CVE-2023-0532

A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/disapprove_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched r...

5.8CVSS5.3AI score0.00046EPSS
CVE
CVE•added 2023/03/14 3:15 p.m.•39 views

CVE-2023-1396

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin/traveller_details.php. The manipulation of the argument address leads to cross site scripting. The attack may be i...

6.1CVSS4.8AI score0.0007EPSS
CVE
CVE•added 2023/09/10 12:15 a.m.•39 views

CVE-2023-4866

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been d...

9.8CVSS7.4AI score0.00045EPSS
CVE
CVE•added 2023/01/27 11:15 a.m.•38 views

CVE-2023-0531

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/booking_report.php. The manipulation of the argument to_date leads to sql injection. It is possible to launch the attack remotely. ...

5.8CVSS5.3AI score0.00046EPSS
CVE
CVE•added 2023/01/27 11:15 a.m.•37 views

CVE-2023-0533

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this issue is some unknown functionality of the file admin/expense_report.php. The manipulation of the argument from_date leads to sql injection. The attack ...

5.8CVSS5.2AI score0.00046EPSS
CVE
CVE•added 2022/09/27 11:15 p.m.•36 views

CVE-2022-40352

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_traveller.php.

7.2CVSS7.2AI score0.00086EPSS
CVE
CVE•added 2023/03/14 3:15 p.m.•34 views

CVE-2023-1391

A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/ab.php. The manipulation of the argument img leads to unrestricted upload. It is possible to launch the attack remotely. ...

9.8CVSS7.2AI score0.00052EPSS
CVE
CVE•added 2023/03/23 8:15 a.m.•34 views

CVE-2023-1590

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The ...

9.8CVSS8.3AI score0.00057EPSS
CVE
CVE•added 2022/10/14 8:15 p.m.•32 views

CVE-2022-41416

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/update_booking.php.

7.2CVSS7.2AI score0.00086EPSS
CVE
CVE•added 2023/05/10 6:15 a.m.•32 views

CVE-2023-2619

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects the function exec of the file disapprove_delete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. ...

9.8CVSS8.3AI score0.00052EPSS