CVE-2022-28607

Published December 1st, 2022

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/mod_users/controller.php.

killmonday/isic.lk-RCE

isic.lk tour booking website multi vuln (sqli/ file upload / info leak) lead to RCE

GitHub