CNNVD-202508-1725 Information

CNNVD ID

CNNVD-202508-1725

CVE-2025-8972

  • CNNVD Published: 2025-08-14

Description (Chinese)

itsourcecode Online Tour and Travel Management System是itsourcecode开源的一个在线旅游与旅行管理系统。 itsourcecode Online Tour and Travel Management System 1.0版本存在注入漏洞,该漏洞源于对文件/admin/page-login.php中参数email的错误操作导致SQL注入。

Description (English)

Its sourcecode Online Tour and Travel Management System is an online tourism and travel management system open to access. Its sourcecode Online Tour and Travel Management System Version 1.0 has an injection loophole, which results from an error in email, the parameter in the document/admin/page-login.php.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

itsourcecode

Published

2025-08-14

Last Modified

2026-02-24

References

https://vuldb.com/?id.319967 https://vuldb.com/?submit.628168 https://vuldb.com/?ctiid.319967 https://itsourcecode.com/ https://github.com/zzb1388/cve/issues/31 https://nvd.nist.gov/vuln/detail/CVE-2025-8972

Share on: