CNNVD-202508-1716 Information

CNNVD ID

CNNVD-202508-1716

CVE-2025-8970

  • CNNVD Published: 2025-08-14

Description (Chinese)

itsourcecode Online Tour and Travel Management System是itsourcecode开源的一个在线旅游与旅行管理系统。 itsourcecode Online Tour and Travel Management System 1.0版本存在注入漏洞,该漏洞源于对文件/admin/operations/booking.php中参数ID的错误操作导致SQL注入。

Description (English)

Its sourcecode Online Tour and Travel Management System is an online tourism and travel management system open to access. Its sourcecode Online Tour and Travel Management System Version 1.0 has an injection loophole, which results from an error in the performance of parameter ID in the document/admin/operations/booking.php.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

itsourcecode

Published

2025-08-14

Last Modified

2026-02-24

References

https://vuldb.com/?id.319965 https://vuldb.com/?submit.628166 https://github.com/zzb1388/cve/issues/33 https://vuldb.com/?ctiid.319965 https://itsourcecode.com/ https://nvd.nist.gov/vuln/detail/CVE-2025-8970

Share on: