← Database

CVE-2022-44401

CRITICAL CVSS: 9.8 Published: 2022-11-28 Modified: 2026-06-17

Description

Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.

Affected Platforms

Online Tours \& Travels Management System Project Online Tours \& Travels Management System

Weakness Type

CWE-434, CWE-434

References