Submit #78593: Online Tours & Travels Management System V1.0 admin/expense_report.php to_date sql injection
| Title | Online Tours & Travels Management System V1.0 admin/expense_report.php to_date sql injection |
|---|---|
| Description | A vulnerability classified as serious has been found in the Online Tours&Travels Management System V 1.0. This will affect the file admin/expense_report.php. The to_date parameter is directly spliced into the sql statement and executed without any filtering .Causes malicious users to modify to_date parameters and splice malicious sql statements for attack |
| Source | ⚠️ https:/ |
| User | haicheng.zhang (ID 38987) |
| Submission | 01/27/2023 11:26 (1 Year ago) |
| Moderation | 01/27/2023 11:42 (16 minutes later) |
| Accepted | Accepted |
| VulDB Entry | VDB-219603 |