high7.2Public exploit code
CVE-2025-57642
A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP shell scripts on the server, leading to re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tourism Management System 2.0 - Arbitrary Shell Upload2025-09-16 · webapps · multiple
Impact
A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP shell scripts on the server, leading to remote code execution and unauthorized access to the system. This can result in the compromise of sensitive data and system functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sohamjuhin | Tourism Management System | Version 2.0 |