← Back

Online Tours And Travels Management System

online_tours_and_travels_management_system

Vendor: Online Tours And Travels Management System Project • 8 CVEs

CVEs (8)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-43050
1Online Tours And Travels Management System Project
1Online Tours And Travels Management System
May 5, 2025
Nov 7, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php. This vulnerability allows attackers to execute arbitrary code via a craf...Show more
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.Show less
CVE-2022-42142
1Online Tours And Travels Management System Project
1Online Tours And Travels Management System
May 14, 2025
Oct 17, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php.
CVE-2022-40097
1Online Tours And Travels Management System Project
1Online Tours And Travels Management System
May 21, 2025
Sep 26, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php.
CVE-2022-40093
1Online Tours And Travels Management System Project
1Online Tours And Travels Management System
May 22, 2025
Sep 23, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php.
CVE-2022-40092
1Online Tours And Travels Management System Project
1Online Tours And Travels Management System
May 22, 2025
Sep 23, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php.
CVE-2022-40091
1Online Tours And Travels Management System Project
1Online Tours And Travels Management System
May 22, 2025
Sep 23, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php.
CVE-2022-35421
1Online Tours And Travels Management System Project
1Online Tours And Travels Management System
Nov 21, 2024
Aug 2, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php.
CVE-2022-32992
1Online Tours And Travels Management System Project
1Online Tours And Travels Management System
Nov 21, 2024
Jun 15, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php.