Online Tours & Travels Management System Project

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Online Tours & Travels Management System Project records in CISA KEV

No Online Tours & Travels Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Tours & Travels Management System 28 records HIGH

Records

28 records

TI-2022-21812 CVE-2022-44401 · GHSA-p55m-w5rp-9m22

Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.

HIGH 82

Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0091 Published 2022-11-28 No fix listed CWE-434

TI-2022-19947 CVE-2022-41537 · GHSA-gw82-f9mr-329m

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file…

HIGH 73

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /user_operations/profile.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01424 Published 2022-10-18 No fix listed CWE-434

TI-2022-21011 CVE-2022-43061 · GHSA-75mr-4jcm-6rrg

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file…

HIGH 67

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /operations/travellers.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01241 Published 2022-11-03 No fix listed CWE-434

TI-2023-00308 CVE-2023-0324 · GHSA-hj4m-mcvw-qf65

SourceCodester Online Tours & Travels Management System page-login.php sql injection

MEDIUM 60

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18805 Published 2023-01-16 No fix listed CWE-89

TI-2023-01499 CVE-2023-1590 · GHSA-45gx-3q8v-w6h2

SourceCodester Online Tours & Travels Management System currency.php exec sql injection

MEDIUM 44

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00822 Published 2023-03-23 No fix listed CWE-89

TI-2023-01498 CVE-2023-1589 · GHSA-pp7p-2hmh-q857

SourceCodester Online Tours & Travels Management System approve_delete.php exec sql injection

MEDIUM 44

A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00822 Published 2023-03-23 No fix listed CWE-89

TI-2023-04480 CVE-2023-4866 · GHSA-v82h-vx7v-xprp

SourceCodester Online Tours & Travels Management System booking.php exec sql injection

MEDIUM 43

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-02448 CVE-2023-2619 · GHSA-w8mq-qvgq-hhjw

SourceCodester Online Tours & Travels Management System disapprove_delete.php exec sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2023-05-10 No fix listed CWE-89

TI-2023-01315 CVE-2023-1391 · GHSA-j7q6-3657-5wfh

SourceCodester Online Tours & Travels Management System ab.php unrestricted upload

MEDIUM 43

A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00705 Published 2023-03-14 No fix listed CWE-434

TI-2023-00541 CVE-2023-0570 · GHSA-vrj8-2xrx-wpr6

SourceCodester Online Tours & Travels Management System payment_operation.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00608 Published 2023-01-29 No fix listed CWE-89

TI-2023-00501 CVE-2023-0530 · GHSA-7fcf-v6vx-4jj9

SourceCodester Online Tours & Travels Management System approve_user.php sql injection

MEDIUM 43

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2023-01-27 No fix listed CWE-89

TI-2023-00532 CVE-2023-0561 · GHSA-q65c-g7rw-fq59

SourceCodester Online Tours & Travels Management System s.php sql injection

LOW 39

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00738 Published 2023-01-28 No fix listed CWE-89

TI-2022-19168 CVE-2022-40354 · GHSA-3ww9-jwr8-mpg3

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_booking.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00998 Published 2022-09-27 No fix listed CWE-89

TI-2022-19167 CVE-2022-40353 · GHSA-xjg2-7c9h-gr9w

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/up_booking.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00998 Published 2022-09-27 No fix listed CWE-89

TI-2022-18992 CVE-2022-40099 · GHSA-v4qf-2m5f-gvqh

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense_category.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00978 Published 2022-09-26 No fix listed CWE-89

TI-2022-18991 CVE-2022-40098 · GHSA-9vw3-7273-x48x

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00998 Published 2022-09-26 No fix listed CWE-89

TI-2022-19877 CVE-2022-41416 · GHSA-q279-7v5j-3mv3

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 35

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/update_booking.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-14 No fix listed CWE-89

TI-2022-19166 CVE-2022-40352 · GHSA-76fw-v9wm-37cg

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 35

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_traveller.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00883 Published 2022-09-27 No fix listed CWE-89

TI-2023-00489 CVE-2023-0516 · GHSA-2wvv-pxv7-cgf7

SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection

LOW 34

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0106 Published 2023-01-26 No fix listed CWE-89

TI-2023-00488 CVE-2023-0515 · GHSA-px3h-pw4r-q82w

SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection

LOW 34

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0106 Published 2023-01-26 No fix listed CWE-89

TI-2023-00531 CVE-2023-0560 · GHSA-ggj3-rpfr-2wmg

SourceCodester Online Tours & Travels Management System practice_pdf.php sql injection

LOW 33

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00723 Published 2023-01-28 No fix listed CWE-89

TI-2023-00500 CVE-2023-0529 · GHSA-r646-gpwh-j5rj

SourceCodester Online Tours & Travels Management System add_payment.php sql injection

LOW 29

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0058 Published 2023-01-27 No fix listed CWE-89

TI-2023-00499 CVE-2023-0528 · GHSA-hvpv-4g86-vvp8

SourceCodester Online Tours & Travels Management System abc.php sql injection

LOW 29

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0058 Published 2023-01-27 No fix listed CWE-89

TI-2023-01320 CVE-2023-1396 · GHSA-2gg7-fmrc-x55w

SourceCodester Online Tours & Travels Management System traveller_details.php cross site scripting

LOW 28

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00562 Published 2023-03-14 No fix listed CWE-79

TI-2023-00504 CVE-2023-0533 · GHSA-cxgh-m66h-vcf8

SourceCodester Online Tours & Travels Management System expense_report.php sql injection

LOW 23

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00637 Published 2023-01-27 No fix listed CWE-89

Open these records in search →