A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/page-login.php. This manipulation of the argument email causes sql injection.
This vulnerability appears as CVE-2025-9154. The attack may be initiated remotely. In addition, an exploit is available.
