CVE-2025-8984 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/expen…
Medium CVSS: 6.9

CVE-2025-8984

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/expense_category.php. The manipulation of the argument expense_name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Vendor
Mayurik
Product
Online Tour \& Travel Management System
CWE
CWE-74
Yayın Tarihi
2025-08-14 22:15:25
Güncelleme
2025-08-18 15:05:46
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Online Tour \& Travel Management System MEDIUM Mayurik 2025

Referanslar

https://github.com/zhuyi-hz/cve/issues/7 https://itsourcecode.com/ https://vuldb.com/?ctiid.319980 https://vuldb.com/?id.319980 https://vuldb.com/?submit.628661 https://github.com/zhuyi-hz/cve/issues/7