CNNVD-202508-1807 Information

CNNVD ID

CNNVD-202508-1807

CVE-2025-9008

  • CNNVD Published: 2025-08-15

Description (Chinese)

itsourcecode Online Tour and Travel Management System是itsourcecode开源的一个在线旅游与旅行管理系统。 itsourcecode Online Tour and Travel Management System 1.0版本存在注入漏洞,该漏洞源于对文件/admin/sms_setting.php中参数uname的错误操作导致SQL注入。

Description (English)

Its sourcecode Online Tour and Travel Management System is an online tourism and travel management system open to access. Its sourcecode Online Tour and Travel Management System Version 1.0 has an injection loophole, which results from an error in the operation of the argument uname in the document/admin/sms setting.php.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

itsourcecode

Published

2025-08-15

Last Modified

2026-02-24

References

https://vuldb.com/?id.320039 https://vuldb.com/?submit.628871 https://vuldb.com/?ctiid.320039 https://itsourcecode.com/ https://github.com/lin-3-start/lin-cve/issues/4 https://access.redhat.com/security/cve/cve-2025-9008 https://nvd.nist.gov/vuln/detail/CVE-2025-9008

Share on: