CVE-2025-8969: itsourcecode Online Tour and Travel Management System approve_user.php sql injection
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/approveuser.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8969?
The severity of CVE-2025-8969 is considered critical due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-8969?
To fix CVE-2025-8969, validate and sanitize all user inputs, especially in the /admin/approve_user.php file.
What type of attack does CVE-2025-8969 allow?
CVE-2025-8969 allows for SQL injection attacks that can be executed remotely.
Which software is affected by CVE-2025-8969?
CVE-2025-8969 affects the itsourcecode Online Tour and Travel Management System version 1.0.
Can CVE-2025-8969 be exploited without authentication?
Yes, CVE-2025-8969 can potentially be exploited without requiring user authentication.