Description
itsourcecode Online Tour and Travel Management System是itsourcecode开源的一个在线旅游与旅行管理系统。 itsourcecode Online Tour and Travel Management System 1.0版本存在注入漏洞，该漏洞源于对文件/admin/operations/packages.php中参数pname的错误操作导致SQL注入。
itsourcecode Online Tour and Travel Management System 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/lin-3-start/lin-cve/issues/4
https://app.opencve.io/cve/?vendor=itsourcecode&product=online_tour_and_travel_management_system
https://cve.imfht.com/ti_screenshot/2025-08-22/webpage-2025-08-22T16-35-50.912Z-e98da199c0acb56f53eb.pdf
https://www.sentinelone.com/vulnerability-database/cve-2025-8967/
https://radar.offseq.com/threat/cve-2025-8970-sql-injection-in-itsourcecode-online-64082e56
https://www.cve.org/CVERecord?id=CVE-2025-8983
https://vuldb.com/submit/628164
https://www.nmmapper.com/nvd/cve/CVE-2025-9154/
https://nvd.nist.gov/vuln/detail/CVE-2025-8971
https://cvefeed.io/vuln/detail/CVE-2025-8970