CVE-2008-6289

The CVE identifies an SQL injection in cityview.php of Tours Manager 1.0, exploitable via the cityid parameter. Affected component/function is cityview.php; underlying issue is improper input handling allowing arbitrary SQL execution. The primary sources (NVD/NVD-linked records) confirm remote ex...

CVE-2008-6303

CVE-2008-6303 describes an SQL injection vulnerability in ToursManager's tourview.php, exploitable via the tourid parameter. The underlying issue is that user-supplied input is used in SQL queries without proper validation or parameterization, enabling remote attackers to execute arbitrary SQL co...