Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:tourism_management_system:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductTourism Management System (572760bb-3313-5963-b13b-809864c2b779)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41333 vulnerable 2026-06-08 06:43:54.356638 Details available
A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the uname parameter.
Published: 2024-08-06T00:00:00.000Z
Updated: 2025-03-13T18:34:11.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32256 vulnerable 2026-06-08 06:35:33.002861 Details available
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image.
Published: 2024-04-16T00:00:00.000Z
Updated: 2026-02-06T14:55:26.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32254 vulnerable 2026-06-08 06:35:33.002451 Details available
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a new package, there is no checks for what types of files are uploaded from the image.
Published: 2024-04-16T00:00:00.000Z
Updated: 2024-11-06T14:50:03.464Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.