Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.4) | 0.29% | — | Mayurik Online Tours AND Travels Management System | 4/10/2024 | 17/6/2026 | itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions, val-digits and state_name parameters in travellers.php. | |
| Modificada | Alta (7.2) | 1.0% | — | Online Tours AND Travels Management System Project Online Tours AND Travels Management System | 7/11/2022 | 17/6/2026 | Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | |
| Modificada | Alta (7.2) | 1.1% | — | Online Tours AND Travels Management System Project Online Tours AND Travels Management System | 17/10/2022 | 17/6/2026 | Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php. | |
| Modificada | Alta (7.2) | 1.1% | — | Online Tours AND Travels Management System Project Online Tours AND Travels Management System | 26/9/2022 | 17/6/2026 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php. | |
| Modificada | Alta (7.2) | 1.0% | — | Online Tours AND Travels Management System Project Online Tours AND Travels Management System | 23/9/2022 | 17/6/2026 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php. | |
| Modificada | Alta (7.2) | 1.0% | — | Online Tours AND Travels Management System Project Online Tours AND Travels Management System | 23/9/2022 | 17/6/2026 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php. | |
| Modificada | Alta (7.2) | 1.0% | — | Online Tours AND Travels Management System Project Online Tours AND Travels Management System | 23/9/2022 | 17/6/2026 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php. | |
| Modificada | Alta (7.2) | 0.90% | — | Online Tours AND Travels Management System Project Online Tours AND Travels Management System | 2/8/2022 | 17/6/2026 | Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php. | |
| Modificada | Alta (7.2) | 0.96% | — | Online Tours AND Travels Management System Project Online Tours AND Travels Management System | 15/6/2022 | 17/6/2026 | Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php. |