A vulnerability identified as critical has been detected in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection.
This vulnerability is reported as CVE-2025-9425. The attack is possible to be carried out remotely. Moreover, an exploit is present.
