CVE-2026-86282 | jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132 CommonDao CommonController.java table/column/xColumn/yColumn sql injection

September 6, 2026 Yanac

A vulnerability categorized as critical has been discovered in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument table/column/xColumn/yColumn can lead to sql injection.

This vulnerability is tracked as CVE-2026-86282. The attack can be launched remotely. Moreover, an exploit is present.

This product does not use versioning. This is why information about affected and unaffected releases are unavailable. A patch should be applied to remediate this issue.VulDB Recent EntriesRead More