1909900436/bug_report

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-43050 ↗	Nov 7, 2022Monday, 7 November 2022, 20:15	7.2 HIGH	—
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-43051 ↗	Nov 7, 2022Monday, 7 November 2022, 20:15	7.2 HIGH	—
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete_test.
CVE-2022-43052 ↗	Nov 7, 2022Monday, 7 November 2022, 20:15	7.2 HIGH	—
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete.