Vulnerabilities > Toursmanager

DATE CVE VULNERABILITY TITLE RISK
2009-02-26 CVE-2008-6303 SQL Injection vulnerability in Toursmanager Tours Manager
SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter.
network
low complexity
toursmanager CWE-89
7.5
2009-02-26 CVE-2008-6289 SQL Injection vulnerability in Toursmanager Tours Manager 1.0
SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter.
network
low complexity
toursmanager CWE-89
7.5