Threats tagged 'ghsa-hg48-p763-prfq'

A SQL injection vulnerability exists in the ashraf-kabir travel-agency software in the /admin_area/index.php file via the edit_pack parameter. This vulnerability allows remote attackers with high privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. The vendor has not responded to disclosure, and no version details or patches are available. The vulnerability has a medium severity rating with a CVSS score of 4.7.