A vulnerability was found in the Tourism-Management-System, affecting the AuthorizationInterceptor.java file. The issue allows for improper authorization and can be exploited remotely. A patch has been provided to fix this issue. The vulnerability has a CVSS score of 2.1 and a severity of LOW. The affected product uses a rolling release model, making it difficult to determine affected versions. Verificati [truncated]
A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. The vulnerability affects the function getOption of the file travel/src/main/java/com/controller/CommonController.java, allowing for information disclosure through manipulation of the tableName/columnName arguments. The attack may be initiated remotely, and the exploit has [truncated]
A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. A manipulation of the argument table/column/xColumn/yColumn can lead to sql injection. The attack can be launched remotely. This product does not use versioning. A patch is called d44ec3aa0bd2a72c8800e3befb0a9a96a6491b86 and should be applied to remediate this issue.
