Online Tours AND Travels Management System Project
Online Tours AND Travels Management System Project Online Tours AND Travels Management System: vulnerabilidades y CVE
Online Tours AND Travels Management System Project Online Tours AND Travels Management System tiene 8 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-43050 | Alta (7.2) | 1.0% | — | 7 nov 2022 | Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php. This vulnerability allows attackers to execute arbitrary code via a… |
| CVE-2022-42142 | Alta (7.2) | 1.1% | — | 17 oct 2022 | Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php. |
| CVE-2022-40097 | Alta (7.2) | 1.1% | — | 26 sept 2022 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php. |
| CVE-2022-40093 | Alta (7.2) | 1.0% | — | 23 sept 2022 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php. |
| CVE-2022-40092 | Alta (7.2) | 1.0% | — | 23 sept 2022 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php. |
| CVE-2022-40091 | Alta (7.2) | 1.0% | — | 23 sept 2022 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php. |
| CVE-2022-35421 | Alta (7.2) | 0.90% | — | 2 ago 2022 | Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php. |
| CVE-2022-32992 | Alta (7.2) | 0.96% | — | 15 jun 2022 | Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php. |