Vendor
The Tourism-Management-System contains a critical SQL injection vulnerability in the CommonDao component allowing remote unauthenticated attackers to execute arbitrary database queries.