The Tourism-Management-System contains a critical SQL injection vulnerability in the CommonDao component allowing remote unauthenticated attackers to execute arbitrary database queries.
Tourism-Management-System +1
web-application
sql-injection
cve-2026-86282
1r
1t
1c
updated