PatchTheCVE: online tours and travels management system projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-43050: Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerabilityhttps://patchthecve.com/cve/CVE-2022-43050.htmlhttps://patchthecve.com/cve/CVE-2022-43050.htmlWed, 17 Jun 2026 05:05:50 +0000HIGH 7.2: Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.CVE-2022-42142: Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operhttps://patchthecve.com/cve/CVE-2022-42142.htmlhttps://patchthecve.com/cve/CVE-2022-42142.htmlWed, 17 Jun 2026 05:04:26 +0000HIGH 7.2: Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php.CVE-2022-40097: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the https://patchthecve.com/cve/CVE-2022-40097.htmlhttps://patchthecve.com/cve/CVE-2022-40097.htmlWed, 17 Jun 2026 05:00:53 +0000HIGH 7.2: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php.CVE-2022-40093: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the https://patchthecve.com/cve/CVE-2022-40093.htmlhttps://patchthecve.com/cve/CVE-2022-40093.htmlWed, 17 Jun 2026 05:00:53 +0000HIGH 7.2: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_tax.php.CVE-2022-40092: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the https://patchthecve.com/cve/CVE-2022-40092.htmlhttps://patchthecve.com/cve/CVE-2022-40092.htmlWed, 17 Jun 2026 05:00:53 +0000HIGH 7.2: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_payment.php.CVE-2022-40091: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the https://patchthecve.com/cve/CVE-2022-40091.htmlhttps://patchthecve.com/cve/CVE-2022-40091.htmlWed, 17 Jun 2026 05:00:53 +0000HIGH 7.2: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_packages.php.CVE-2022-35421: Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via thhttps://patchthecve.com/cve/CVE-2022-35421.htmlhttps://patchthecve.com/cve/CVE-2022-35421.htmlWed, 17 Jun 2026 04:51:48 +0000HIGH 7.2: Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php.CVE-2022-32992: Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via thhttps://patchthecve.com/cve/CVE-2022-32992.htmlhttps://patchthecve.com/cve/CVE-2022-32992.htmlWed, 17 Jun 2026 04:48:20 +0000HIGH 7.2: Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php.