Threats tagged 'ghsa-gc6p-3vgc-rm2q'

A SQL injection vulnerability exists in PHPGurukul Tourism Management System 1.0 within the /admin/user-bookings.php file. The flaw arises from improper handling of the uid argument, allowing remote attackers to execute arbitrary SQL commands. Public exploit code is available, increasing the risk of exploitation.