Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:online_tours_&_travels_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductOnline Tours & Travels Management System (fc7ff94a-7e00-5a0a-abad-9f3e81718840)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2168 vulnerable 2026-06-08 06:33:30.465738 SourceCodester Online Tours & Travels Management System HTTP POST Request expense_category.php sql injection
MEDIUM (4.7)
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expense_category.php of the component HTTP POST Request Handler. The manipulation of the argument status leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255678 is the identifier assigned to this vulnerability.
Published: 2024-03-04T21:00:11.431Z
Updated: 2024-08-01T19:03:39.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0884 vulnerable 2026-06-08 06:22:03.057921 SourceCodester Online Tours & Travels Management System payment.php exec sql injection
MEDIUM (4.7)
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function exec of the file payment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252035.
Published: 2024-01-25T20:31:04.271Z
Updated: 2025-06-03T18:20:08.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0883 vulnerable 2026-06-08 06:22:03.057467 SourceCodester Online Tours & Travels Management System pay.php prepare sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects the function prepare of the file admin/pay.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252034 is the identifier assigned to this vulnerability.
Published: 2024-01-25T19:00:07.377Z
Updated: 2025-05-29T15:19:11.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0735 vulnerable 2026-06-08 06:22:02.022827 SourceCodester Online Tours & Travels Management System expense.php exec sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. Affected by this issue is the function exec of the file admin/operations/expense.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251558 is the identifier assigned to this vulnerability.
Published: 2024-01-19T21:00:05.551Z
Updated: 2024-09-03T19:49:14.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6765 vulnerable 2026-06-08 06:21:55.767071 SourceCodester Online Tours & Travels Management System email_setup.php prepare sql injection
MEDIUM (5.5)
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepare of the file email_setup.php. The manipulation of the argument name leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247895.
Published: 2023-12-13T17:31:04.162Z
Updated: 2024-08-02T08:42:07.394Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4866 vulnerable 2026-06-08 06:16:14.766955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2619 vulnerable 2026-06-08 06:02:42.645465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1590 vulnerable 2026-06-08 05:52:36.161612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1589 vulnerable 2026-06-08 05:52:36.161263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1396 vulnerable 2026-06-08 05:52:35.761724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1391 vulnerable 2026-06-08 05:52:35.756132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0570 vulnerable 2026-06-08 05:52:31.940767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0561 vulnerable 2026-06-08 05:52:31.925441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0560 vulnerable 2026-06-08 05:52:31.924984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0534 vulnerable 2026-06-08 05:52:31.876322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0533 vulnerable 2026-06-08 05:52:31.875775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0532 vulnerable 2026-06-08 05:52:31.875235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0531 vulnerable 2026-06-08 05:52:31.874611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0530 vulnerable 2026-06-08 05:52:31.874109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0529 vulnerable 2026-06-08 05:52:31.873668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0528 vulnerable 2026-06-08 05:52:31.873084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0516 vulnerable 2026-06-08 05:52:31.835681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0515 vulnerable 2026-06-08 05:52:31.834399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0324 vulnerable 2026-06-08 05:52:04.750475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.