Approved changes feed: RSS · Atom

cpe:2.3:a:online_tours_and_travels_management_system_project:online_tours_and_travels_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOnline Tours And Travels Management System Project (221c618c-84dd-5d10-9b10-3b427cce596f)
ProductOnline Tours And Travels Management System (776322db-47ee-5661-aa67-1b39d79767f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48411 vulnerable 2026-06-08 06:50:09.471172 Details available
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI) via a crafted payload to the val-email parameter in forget_password.php.
Published: 2024-10-15T00:00:00.000Z
Updated: 2024-10-16T18:18:10.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46077 vulnerable 2026-06-08 06:48:09.929221 Details available
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions, val-digits and state_name parameters in travellers.php.
Published: 2024-10-04T00:00:00.000Z
Updated: 2024-10-04T22:17:24.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43050 vulnerable 2026-06-08 05:49:31.095522 Details available
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Published: 2022-11-07T00:00:00.000Z
Updated: 2025-05-05T17:56:27.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42142 vulnerable 2026-06-08 05:49:29.521247 Details available
Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php.
Published: 2022-10-17T00:00:00.000Z
Updated: 2025-05-14T20:38:01.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40097 vulnerable 2026-06-08 05:48:22.880190 Details available
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php.
Published: 2022-09-26T20:25:10.000Z
Updated: 2025-05-21T18:32:44.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40093 vulnerable 2026-06-08 05:48:22.879729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40092 vulnerable 2026-06-08 05:48:22.879224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40091 vulnerable 2026-06-08 05:48:22.878641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35421 vulnerable 2026-06-08 05:46:04.890061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32992 vulnerable 2026-06-08 05:44:46.125004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.