CVE-2024-0884: medium-severity vulnerability in SourceCodester Online Tours & Travels…
SourceCodester Online Tours & Travels Management System payment.php exec sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 0.6%
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function exec of the file payment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252035.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Online Tours & Travels Management SystemRelated CVEs — SourceCodester Online Tours & Travels…
In the same product, most dangerous first.
CVE-2023-0324HIGHSourceCodester Online Tours & Travels Management System page-login.php sql injectionEPSS 18.8%CVE-2023-0516MEDIUMSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injectionEPSS 1.1%CVE-2023-0515MEDIUMSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injectionEPSS 1.1%CVE-2023-1590MEDIUMSourceCodester Online Tours & Travels Management System currency.php exec sql injectionEPSS 0.8%CVE-2023-1589MEDIUMSourceCodester Online Tours & Travels Management System approve_delete.php exec sql injectionEPSS 0.8%CVE-2023-4866MEDIUMSourceCodester Online Tours & Travels Management System booking.php exec sql injectionEPSS 0.7%