Threats tagged 'ghsa-j4gr-x8p4-92w8'

A SQL injection vulnerability exists in the contact_insert.php file of the oretnom23 php-travel-agency-system. This flaw allows remote attackers to manipulate input fields such as name, company, email, topic, phone, and comments to execute SQL injection attacks. The vulnerability has a high severity score and public exploit code is available. The project has been notified but has not yet responded or issued a fix.