Phpgurukul Tourism Management System
7 CVEs affecting Phpgurukul Tourism Management System. Latest disclosed: 2025-11-16. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32254 | High | 8.8 | 2024-04-16 | Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a ne… |
CVE-2020-28136 | High | 8.8 | 2020-11-17 | An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-packag… |
CVE-2024-32256 | High | 8.1 | 2024-04-16 | Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a cur… |
CVE-2025-13247 | High | 7.3 | 2025-11-16 | A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.p… |
CVE-2024-41333 | Medium | 6.1 | 2024-08-06 | A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to execute arbitrary code in the context of… |
CVE-2022-30930 | Medium | 4.3 | 2022-06-14 | Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF). |
CVE-2024-1822 | Low | 2.4 | 2024-02-23 | A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings… |