Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php.
https://github.com/NUDTTAN91/CVE_CTF
https://www.yuque.com/docs/share/d1593cea-f278-4a5e-a6ee-f7a63b641f1d