CVE-2025-9153 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations…
Medium CVSS: 5.3

CVE-2025-9153

A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument photo results in unrestricted upload. The attack can be launched remotely. The exploit is now public and may be used.
Vendor
Mayurik
Product
Online Tour \& Travel Management System
CWE
CWE-284
Yayın Tarihi
2025-08-19 19:15:38
Güncelleme
2025-08-21 18:41:18
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-284 Online Tour \& Travel Management System MEDIUM Mayurik 2025

Referanslar

https://github.com/HjsCS/CVE/issues/4 https://itsourcecode.com/ https://vuldb.com/?ctiid.320533 https://vuldb.com/?id.320533 https://vuldb.com/?submit.630200 https://github.com/HjsCS/CVE/issues/4