Description
An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/mod_users/controller.php.
High · 7.5
CVE-2022-28607
EUVD-2022-33049GHSA-g76x-m5qr-8rc7
An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive in…
Published Dec 1, 2022 · Updated Apr 24, 2025 · Assigned by mitre