CVE-2022-40093 Online Tours & Travels Management System v10 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/update_taxphp authentication complexity vector not available not available not available confidentiality integrity availability not available not available not available CVSS Score: not available R