Threats tagged 'ghsa-6hhx-4f46-wj7q'

CVE-2026-129443 is a SQL injection vulnerability in itsourcecode Airline Reservation System 1.0, specifically in an unknown function within /admin/manage_user.php. The vulnerability allows remote attackers with low privileges to manipulate the ID argument, potentially leading to unauthorized data access or modification. The vulnerability has been publicly disclosed and exploit code is available. The CVSS score is 6.3, indicating a medium severity level.