Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-48411 2 Mayurik, Online Tours And Travels Management System Project 2 Online Tours \& Travels Management System, Online Tours And Travels Management System 2025-05-17 9.8 Critical
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI) via a crafted payload to the val-email parameter in forget_password.php.
CVE-2024-46077 2 Mayurik, Online Tours And Travels Management System Project 2 Online Tours And Travels Management System, Online Tours And Travels Management System 2025-04-28 5.4 Medium
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions, val-digits and state_name parameters in travellers.php.