Skip to main content

Simple Responsive Tourism Website

5 CVEs product

Monthly

CVE-2026-3746 Mar 08, 16:16 MEDIUM POC This Month

SQL injection in SourceCodester Simple Responsive Tourism Website 1.0 via the Username parameter in the Login.php component enables unauthenticated remote attackers to manipulate database queries and potentially extract sensitive data or modify application state. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected systems exposed to active exploitation.

PHP SQLi Simple Responsive Tourism Website Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2026-2848 Feb 20, 17:25 MEDIUM POC This Month

SQL injection in SourceCodester Simple Responsive Tourism Website 1.0 allows unauthenticated remote attackers to manipulate the Username parameter during registration, potentially enabling data exfiltration, modification, or denial of service. Public exploit code exists for this vulnerability, and no patch is currently available.

PHP SQLi Simple Responsive Tourism Website Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2026-2160 Feb 08, 16:15 LOW POC Monitor

Simple Responsive Tourism Website versions up to 1.0 is affected by cross-site scripting (xss) (CVSS 4.3).

PHP XSS Simple Responsive Tourism Website Oretnom23
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2026-2159 Feb 08, 16:15 LOW POC Monitor

Simple Responsive Tourism Website versions up to 1.0 is affected by cross-site scripting (xss) (CVSS 4.3).

PHP XSS Simple Responsive Tourism Website Oretnom23
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2023-1041 Feb 26, 12:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Responsive Tourism Website 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Simple Responsive Tourism Website Oretnom23
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.5%
EPSS 0% CVSS 5.5
MEDIUM POC This Month

SQL injection in SourceCodester Simple Responsive Tourism Website 1.0 via the Username parameter in the Login.php component enables unauthenticated remote attackers to manipulate database queries and potentially extract sensitive data or modify application state. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected systems exposed to active exploitation.

PHP SQLi Simple Responsive Tourism Website +1
NVD GitHub VulDB
EPSS 0% CVSS 5.5
MEDIUM POC This Month

SQL injection in SourceCodester Simple Responsive Tourism Website 1.0 allows unauthenticated remote attackers to manipulate the Username parameter during registration, potentially enabling data exfiltration, modification, or denial of service. Public exploit code exists for this vulnerability, and no patch is currently available.

PHP SQLi Simple Responsive Tourism Website +1
NVD GitHub VulDB
EPSS 0% CVSS 2.1
LOW POC Monitor

Simple Responsive Tourism Website versions up to 1.0 is affected by cross-site scripting (xss) (CVSS 4.3).

PHP XSS Simple Responsive Tourism Website +1
NVD GitHub VulDB
EPSS 0% CVSS 2.1
LOW POC Monitor

Simple Responsive Tourism Website versions up to 1.0 is affected by cross-site scripting (xss) (CVSS 4.3).

PHP XSS Simple Responsive Tourism Website +1
NVD GitHub VulDB
EPSS 1% CVSS 6.1
MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Responsive Tourism Website 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Simple Responsive Tourism Website +1
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy