Login Request a demo
TM
Product
Tourism Management System
by PHPGurukul · last CVE Nov 16, 2025
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 3Medium 3Low 0
Severity
All severities7Critical1High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tourism Management System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-13247
9.8
0%
Nov 16
PHPGurukul Tourism Management System user-bookings.php sql injection
Affected: 1.0
CVE-2024-32254
8.8
1%
Apr 16
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php
Affected: 2.0
CVE-2020-28136
8.8
3%
Nov 17
An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable…
Affected: 1.0
CVE-2024-32256
8.1
1%
Apr 16
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php
Affected: 2.0
CVE-2024-41333
6.1
1%
Aug 6
A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to execute arbitrary code in the context of a user's browser via…
Affected: 2.0
CVE-2024-1822
6.1
0%
Feb 23
PHPGurukul Tourism Management System user-bookings.php cross site scripting
Affected: 1.0
CVE-2022-30930
4.3
0%
Jun 14
Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF)
Affected: 3.2
Showing 7