Vulnerabilidades do Oretnom23 Simple Responsive Tourism Website
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oretnom23 Simple Responsive Tourism Website: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:oretnom23:simple_responsive_tourism_website
CVE-2026-3746
Crítica · 9.8
CWE-74 08/03/2026
SourceCodester Simple Responsive Tourism Website Login Login.php sql injection
A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-2848
Crítica · 9.8
CWE-89 20/02/2026
SourceCodester Simple Responsive Tourism Website Registration Master.php sql injection
A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
CVE-2026-2160
Média · 6.1
CWE-79 08/02/2026
SourceCodester Simple Responsive Tourism Website Master.php cross site scripting
A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=save_package. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-2159
Média · 6.1
CWE-79 08/02/2026
SourceCodester Simple Responsive Tourism Website Registration Master.php cross site scripting
A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.