Tourism Management System vulnerabilities
3 known vulnerabilities in Tourism Management System from PHPGurukul. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Tourism Management System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possible to launch the attac
- 8.1 High severity
Tourism Management System: Unrestricted Upload of File with Dangerous Type
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image.
- 8.8 High severity
tourism_management_system: Unrestricted Upload of File with Dangerous Type
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a new package, there is no checks for what types of files are uploaded from the image.