Tourism Management System (Phpgurukul) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2025-11-16. Vendor: Phpgurukul.
CVEs of Tourism Management System
- CVE-2025-13247 - CVSS 9.8 (critical), 2025-11-16: A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file…
- CVE-2024-41333 - CVSS 6.1 (medium), 2024-08-06: A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to execute arbitrary code in the context of…
- CVE-2024-32256 - CVSS 8.1 (high), 2024-04-16: Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a…
- CVE-2024-32254 - CVSS 8.8 (high), 2024-04-16: Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a…
- CVE-2024-1822 - CVSS 6.1 (medium), 2024-02-23: A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file…
- CVE-2022-30930 - CVSS 4.3 (medium), 2022-06-14: Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF).
- CVE-2020-28136 - CVSS 8.8 (high), 2020-11-17: An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via…
