Mayurik

Online Tours & Travels Management System

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-6471

Exploit
  • EPSS 0.05%
  • Veröffentlicht 03.07.2024 14:15:06
  • Zuletzt bearbeitet 21.11.2024 09:49:42

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file sms_setting.php. The manipulation of the argument uname leads to sql injection. It is possible to ...

7.2

CVE-2024-2168

Exploit
  • EPSS 0.05%
  • Veröffentlicht 04.03.2024 21:15:07
  • Zuletzt bearbeitet 18.02.2025 16:14:41

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expense_category.php of the component HTTP POST Request Handle...

9.8

CVE-2024-0883

Exploit
  • EPSS 0.05%
  • Veröffentlicht 25.01.2024 19:15:08
  • Zuletzt bearbeitet 21.11.2024 08:47:36

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects the function prepare of the file admin/pay.php. The manipulation of the argument id leads to sql in...

9.8

CVE-2024-0735

Exploit
  • EPSS 0.1%
  • Veröffentlicht 19.01.2024 21:15:09
  • Zuletzt bearbeitet 21.11.2024 08:47:14

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. Affected by this issue is the function exec of the file admin/operations/expense.php. The manipulation leads to sql injection. Th...

9.8

CVE-2023-6765

Exploit
  • EPSS 0.13%
  • Veröffentlicht 13.12.2023 18:15:44
  • Zuletzt bearbeitet 21.11.2024 08:44:30

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepare of the file email_setup.php. The manipulation of the argument name leads to sql injection...