CVE-2023-31938: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the empid parameter at employeedetail.php...