Vulnerabilities > Online Tours Travels Management System Project > Online Tours Travels Management System > High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-09-26	CVE-2022-40098	SQL Injection vulnerability in Online Tours & Travels Management System Project Online Tours & Travels Management System 1.0 Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense.php. network low complexity online-tours-travels-management-system-project CWE-89	7.2
2022-09-26	CVE-2022-40099	SQL Injection vulnerability in Online Tours & Travels Management System Project Online Tours & Travels Management System 1.0 Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense_category.php. network low complexity online-tours-travels-management-system-project CWE-89	7.2

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.