Advisories · Technology
jaychouchannel Tourism-Management-System.
Every CVE that names jaychouchannel Tourism-Management-System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
jaychouchannel Tourism-Management-System Update Endpoint missing authentication
- jaychouchannel Tourism-Management-System
- Authentication bypass
- CVSS 6.9 Medium
jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management
- jaychouchannel Tourism-Management-System
- Privilege escalation
- CVSS 6.9 Medium
jaychouchannel Tourism-Management-System Password Recovery UsersController.java resetPass password recovery
- jaychouchannel Tourism-Management-System
- CWE-640
- CVSS 5.3 Medium
jaychouchannel Tourism-Management-System CRUD MenpiaodingdanController.java authorization
- jaychouchannel Tourism-Management-System
- Broken access control
- CVSS 5.3 Medium
jaychouchannel Tourism-Management-System Authorization Interceptor AuthorizationInterceptor.java improper authorization
- jaychouchannel Tourism-Management-System
- Privilege escalation
- Broken access control
- CVSS 6.9 Medium
jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure
- jaychouchannel Tourism-Management-System
- Information disclosure
- Broken access control
- CVSS 6.9 Medium
jaychouchannel Tourism-Management-System CommonDao CommonController.java sql injection
- jaychouchannel Tourism-Management-System
- Other injection
- SQL injection