Threats tagged 'ghsa-j4mp-63q4-w4fh'

A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system within the admin/customer_detail.php file. The flaw arises from improper handling of parameters such as costomer_id, ticket_id, emp_id, salary_id, and page_id, allowing remote attackers to manipulate SQL queries. Public exploit code is available, but no official response or patch has been issued by the project.