Vulnerability Description
A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mayurik | Online Tour \& Travel Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/shq3526/cve/issues/6ExploitIssue TrackingThird Party Advisory
- https://itsourcecode.com/Product
- https://vuldb.com/?ctiid.321268Permissions RequiredVDB Entry
- https://vuldb.com/?id.321268Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.634149Third Party AdvisoryVDB Entry
- https://github.com/shq3526/cve/issues/6ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2025-9425?
CVE-2025-9425 is a vulnerability with a CVSS score of 7.3 (HIGH). A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation...
How severe is CVE-2025-9425?
CVE-2025-9425 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-9425?
Check the references section above for vendor advisories and patch information. Affected products include: Mayurik Online Tour \& Travel Management System.