YorkLee53645349/Cve_report

Releases0

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2022-43061NVD↗	—	Nov 3, 2022Thursday, 3 November 2022, 20:15	7.2 HIGH	—
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /operations/travellers.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-43062NVD↗	—	Nov 3, 2022Thursday, 3 November 2022, 20:15	7.2 HIGH	—
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_appointment.
CVE-2022-43063NVD↗	—	Nov 3, 2022Thursday, 3 November 2022, 20:15	7.2 HIGH	—
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Users.php?f=delete_client.