Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:tourism_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductTourism Management System (a7ff7cde-943d-5de6-8aa5-256a51855040)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4890 vulnerable 2026-06-08 07:29:17.466755 code-projects Tourism Management System Login User LoginUser stack-based overflow
MEDIUM (5.3)
A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component Login User. The manipulation of the argument username/password leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Published: 2025-05-18T18:00:05.886Z
Updated: 2025-05-19T18:26:47.610Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4889 vulnerable 2026-06-08 07:29:17.465324 code-projects Tourism Management System User Registration AddUser buffer overflow
MEDIUM (5.3)
A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Published: 2025-05-18T17:31:04.154Z
Updated: 2025-05-19T15:22:12.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0538 vulnerable 2026-06-08 07:02:24.813567 code-projects Tourism Management System manage-pages.php cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in code-projects Tourism Management System 1.0. Affected is an unknown function of the file /admin/manage-pages.php. The manipulation of the argument pgedetails leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-17T20:31:04.725Z
Updated: 2025-01-18T08:47:48.867Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.