CVEvulnerability

CVE-2022-42142

7.2 HIGH Published 2022-10-17 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2022-10-17
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php.

Affected configurations

• online tours and travels management system project online tours and travels management system 1.0

References

https://github.com/xd201qaz/bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/RCE-1.md Exploit, Third Party Advisory
https://github.com/xd201qaz/bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/RCE-1.md Exploit, Third Party Advisory