OT
Product
Online Tours And Travels Management System
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 1Low 0
Watch
Add Online Tours And Travels Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-43050 | 7.2 | Nov 7 | Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php Affected: 1.0 |
| CVE-2022-42142 | 7.2 | Oct 17 | Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php Affected: 1.0 |
| CVE-2022-40097 | 7.2 | Sep 26 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php Affected: 1.0 |
| CVE-2022-40093 | 7.2 | Sep 23 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php Affected: 1.0 |
| CVE-2022-40092 | 7.2 | Sep 23 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php Affected: 1.0 |
| CVE-2022-40091 | 7.2 | Sep 23 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php Affected: 1.0 |
| CVE-2022-35421 | 7.2 | Aug 2 | Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php Affected: 1.0 |
| CVE-2022-32992 | 7.2 | Jun 15 | Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php Affected: 1.0 |
Showing 8
