A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /user/page-login.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
CVSS
No CVSS.
References
Configurations
No configuration.
History
19 Aug 2025, 20:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
CWE | CWE-74 |
19 Aug 2025, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-08-19 19:15
Updated : 2025-08-19 20:15
NVD link : CVE-2025-9154
Mitre link : CVE-2025-9154
JSON object : View
Products Affected
No product.
CWE
No CWE.