CNNVD-202508-2219 Information

CNNVD ID

CNNVD-202508-2219

CVE-2025-9155

  • CNNVD Published: 2025-08-19

Description (Chinese)

itsourcecode Online Tour and Travel Management System是itsourcecode开源的一个在线旅游与旅行管理系统。 itsourcecode Online Tour and Travel Management System 1.0版本存在注入漏洞,该漏洞源于对文件/user/forget_password.php中参数email的错误操作导致SQL注入。

Description (English)

Its sourcecode Online Tour and Travel Management System is an online tourism and travel management system open to access. Its sourcecode Online Tour and Travel Management System Version 1.0 has an injection loophole, which results from an error in the email of the parameter in the document/user/forget password.php.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

itsourcecode

Published

2025-08-19

Last Modified

2026-02-24

References

https://vuldb.com/?submit.630202 https://vuldb.com/?id.320535 https://github.com/HjsCS/CVE/issues/2 https://itsourcecode.com/ https://vuldb.com/?ctiid.320535 https://nvd.nist.gov/vuln/detail/CVE-2025-9155 https://access.redhat.com/security/cve/cve-2025-9155

Share on: