Mayurik Online Tours & Travels Management System vulnerabilities

6 CVEs affecting Mayurik Online Tours & Travels Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-48411, published 2024-10-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-6765, published 2023-12-13. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepare of the file email_setup.php. The…
CVE-2024-0735, published 2024-01-19. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. Affected by this issue is the function exec of the file…
CVE-2024-0883, published 2024-01-25. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects the function prepare of the file admin/pay.php.…
CVE-2024-2168, published 2024-03-04. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file…
CVE-2024-6471, published 2024-07-03. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file sms_setting.php. The manipulation of the…
CVE-2024-48411, published 2024-10-15. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI) via a crafted payload to the val-email parameter in forget_password.php.