Shqnq

**Name of the Vulnerable Software and Affected Versions** projectworlds Online Art Gallery Shop Project version 1.0 **Description** Remote SQL injection is possible through the manipulation of the `social insta` argument within an unknown function in the '/admin/adminHome.php' endpoint. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Update projectworlds Online Art Gallery Shop Project version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the '/admin/adminHome.php' endpoint or avoid using the `social insta` argument.

**Name of the Vulnerable Software and Affected Versions** projectworlds Online Art Gallery Shop Project version 1.0 **Description** An issue exists in an unknown function within the `/admin/adminHome.ph` file. Remote manipulation of the `social twitter` argument allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** Restrict access to the `/admin/adminHome.ph` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A security flaw exists in itsourcecode Online Tour and Travel Management System version 1.0. The issue involves SQL injection in the `/enquiry.php` file through manipulation of the `pid` argument. This attack can be carried out remotely. The exploit has been released publicly. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A weakness exists in itsourcecode Online Tour and Travel Management System 1.0, affecting an unknown part of the file `/package.php`. Manipulation of the `subcatid` argument can lead to SQL injection. The attack can be performed remotely. The exploit has been made publicly available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.