Vulnerabilities

TI-2021-07468 CVE-2021-25208 · GHSA-6ww8-7ppc-wcwm

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0…

MEDIUM 46

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01874 Published 2021-07-23 No fix listed CWE-434

TI-2021-07473 CVE-2021-25213 · GHSA-hcw6-2fw9-fg3c

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows…

MEDIUM 45

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01476 Published 2021-07-22 No fix listed CWE-89

Vulnerabilities

Filters

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0…

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows…