Login Request a demo
OT
Product
Online Tours And Travels Management System
by Online Tours And Travels Management System Project · last CVE Oct 15, 2024
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 8Medium 1Low 0
Severity
All severities10Critical1High8Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Online Tours And Travels Management System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-48411
9.8
1%
Oct 15
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI) via a crafted payload to the val-email parameter in forget_password.php
Affected: 1.0
CVE-2022-43050
7.2
1%
Nov 7
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php
Affected: 1.0
CVE-2022-42142
7.2
1%
Oct 17
Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php
Affected: 1.0
CVE-2022-40097
7.2
1%
Sep 26
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php
Affected: 1.0
CVE-2022-40093
7.2
1%
Sep 23
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php
Affected: 1.0
CVE-2022-40092
7.2
1%
Sep 23
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php
Affected: 1.0
CVE-2022-40091
7.2
1%
Sep 23
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php
Affected: 1.0
CVE-2022-35421
7.2
1%
Aug 2
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php
Affected: 1.0
CVE-2022-32992
7.2
1%
Jun 15
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php
Affected: 1.0
CVE-2024-46077
5.4
0%
Oct 4
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions,…
Affected: 1.0
Showing 10