CVE-2025-8970: itsourcecode Online Tour and Travel Management System booking.php sql injection
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/booking.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8970?
CVE-2025-8970 has been classified as a critical severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-8970?
To fix CVE-2025-8970, ensure that proper input validation and parameterized queries are implemented to prevent SQL injections in the /admin/operations/booking.php file.
What are the potential impacts of CVE-2025-8970?
The potential impacts of CVE-2025-8970 include unauthorized access to database contents and possible data manipulation.
Which versions of the Online Tour and Travel Management System are affected by CVE-2025-8970?
CVE-2025-8970 affects version 1.0 of the itsourcecode Online Tour and Travel Management System.
Can CVE-2025-8970 be exploited remotely?
Yes, CVE-2025-8970 can be exploited remotely, making it particularly dangerous for affected systems.