Online Travel Agency System SQL注入漏洞

Online Travel Agency System is an online travel agency system by Qaseem Hilal, an individual developer. A security vulnerability exists in Online Travel Agency System version 1.0, which stems from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary code via the...

CVE-2023-31939: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomerid parameter at customeredit.php...