NetSight
IP …
high7.2

CVE-2022-40091

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php.

Impact

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php.

Affected products

VendorProductAffected versions
Online Tours And Travels Management System ProjectOnline Tours And Travels Management System
Version 1.0

Weakness classification

CWE-89

References