CVE-2024-0735

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. Affected by this issue is the function exec of the file admin/operations/expense.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251558 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Online Tours & Travels Management System	1.0

References

https://blog.csdn.net/DMZNX/article/details/135683738Exploit, Third Party Advisory
https://vuldb.com/?ctiid.251558Permissions Required, Third Party Advisory
https://vuldb.com/?id.251558Third Party Advisory
https://blog.csdn.net/DMZNX/article/details/135683738Exploit, Third Party Advisory
https://vuldb.com/?ctiid.251558Permissions Required, Third Party Advisory
https://vuldb.com/?id.251558Third Party Advisory

Timeline

Published: Jan 19, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-07367.5A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Log CVE-2024-07377.5A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the comp CVE-2024-07389.8A vulnerability, which was classified as critical, has been found in 个人开源 mldong 1.0. This issue affects the function ExpressionEngine of th CVE-2024-07399.8A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Affected is an unknown function of the file /CVE-2024-07409.8Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a remote code execution vulnerability that does CVE-2024-07416.5An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerabil CVE-2024-07424.3It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timesta CVE-2024-07437.5An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox < 122,CVE-2024-07447.5In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploitable crash. This vul CVE-2024-07458.8The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. Thi CVE-2024-07466.5A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR CVE-2024-07476.5When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Cont