CVE-2025-9425: itsourcecode Online Tour and Travel Management System enquiry.php sql injection
A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9425?
CVE-2025-9425 has a high severity rating due to its potential for enabling SQL injection attacks.
How do I fix CVE-2025-9425?
To fix CVE-2025-9425, validate and sanitize all user inputs, especially the 'pid' parameter in the /enquiry.php file.
What software is affected by CVE-2025-9425?
CVE-2025-9425 affects the itsourcecode Online Tour and Travel Management System version 1.0.
What kind of attack can be conducted through CVE-2025-9425?
CVE-2025-9425 allows attackers to perform SQL injection via manipulation of the 'pid' argument.
Is there a patch available for CVE-2025-9425?
As of now, a specific patch for CVE-2025-9425 has not been officially released, so it's essential to implement mitigation strategies immediately.