CVE-2025-9425: A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulat...

Summary

A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection. The attack is possible to be carried out remotely. Th...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
mayurik	online_tour_\&_travel_management_system	1.0 `cpe:2.3:a:mayurik:online_tour_\&_travel_management_system:1.0:::::::*`

Original advisory text

A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulat...

A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

References

https://itsourcecode.com/ Product
https://vuldb.com/?ctiid.321268 Permissions Required VDB Entry
https://vuldb.com/?id.321268 Third Party Advisory VDB Entry
https://vuldb.com/?submit.634149 Third Party Advisory VDB Entry
https://github.com/shq3526/cve/issues/6 Exploit Issue Tracking Third Party Advisory