A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/email_setup.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/lin-3-start/lin-cve/issues/3 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/lin-3-start/lin-cve/issues/3 | Exploit Issue Tracking Third Party Advisory |
| https://itsourcecode.com/ | Product |
| https://vuldb.com/?ctiid.320040 | Permissions Required VDB Entry |
| https://vuldb.com/?id.320040 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.628873 | Third Party Advisory VDB Entry |
Configurations
History
18 Aug 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-74 |
18 Aug 2025, 15:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?ctiid.320040 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.628873 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.320040 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/lin-3-start/lin-cve/issues/3 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://itsourcecode.com/ - Product | |
| First Time |
Mayurik online Tour \& Travel Management System
Mayurik |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:mayurik:online_tour_\&_travel_management_system:1.0:*:*:*:*:*:*:* |
15 Aug 2025, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-15 05:15
Updated : 2025-08-18 19:15
NVD link : CVE-2025-9009
Mitre link : CVE-2025-9009
JSON object : View
Products Affected
mayurik
- online_tour_\&_travel_management_system
CWE
No CWE.