Threats tagged 'ghsa-w5x8-f648-7ghf'

A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system in the traceapplication.php file via the Search argument. This flaw allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. The vulnerability has a CVSS score of 7.3 (high severity). Public exploit code is available, but no official response or patch has been issued by the project.