Online Tours And Travels Management System Project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Online Tours And Travels Management System Project records in CISA KEV

No Online Tours And Travels Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Tours And Travels Management System 8 records HIGH

Records

8 records

TI-2022-20419 CVE-2022-42142 · GHSA-m22f-hjqf-3chh

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution…

HIGH 73

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01383 Published 2022-10-17 No fix listed

TI-2022-21007 CVE-2022-43050 · GHSA-4xqh-77px-7246

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file…

HIGH 67

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01251 Published 2022-11-07 No fix listed CWE-434

TI-2022-18989 CVE-2022-40093 · GHSA-xmxp-x783-v5rx

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-09-23 No fix listed CWE-89

TI-2022-18988 CVE-2022-40092 · GHSA-fhc7-6h7r-f5p6

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-09-23 No fix listed CWE-89

TI-2022-18987 CVE-2022-40091 · GHSA-7873-9v2g-3whm

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-09-23 No fix listed CWE-89

TI-2022-18990 CVE-2022-40097 · GHSA-95p5-rvqm-hfjh

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01101 Published 2022-09-26 No fix listed CWE-89

TI-2022-14501 CVE-2022-32992 · GHSA-q8jx-m42w-vf92

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 34

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-06-15 No fix listed CWE-89

TI-2022-15993 CVE-2022-35421 · GHSA-fjh5-f6hp-hvjh

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00929 Published 2022-08-02 No fix listed CWE-89

Open these records in search →

Critical	0
High	8
Medium	0
Low	0
No CVSS	0