Threats tagged 'ghsa-mh5w-g3j7-g9gw'

A SQL injection vulnerability exists in the admin/customer_search.php file of the oretnom23 php-travel-agency-system. The flaw allows remote attackers to manipulate the customer_name, voucher_no, or emp_name parameters to execute unauthorized SQL commands. The vulnerability has a high severity score of 7.3 and has been publicly disclosed. No patch or vendor response is currently available.