Threats tagged 'ghsa-jrjx-5f6w-vxfg'

A vulnerability in the ashraf-kabir travel-agency software up to commit 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3 allows remote attackers to perform unrestricted file uploads via an unknown function in /customer_register.php. The flaw can be exploited remotely and public exploit code is available. The vendor uses rolling releases and has not responded to disclosure attempts, so specific affected or fixed versions are not provided.