Description
SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/mod_users/controller.php.
Critical · 9.8
CVE-2022-30528
EUVD-2022-52388GHSA-9rrf-x8wr-qf65
SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbit…
Published Dec 1, 2022 · Updated Apr 24, 2025 · Assigned by mitre