Travel Agency Management System
Monthly
SQL injection in Win Men Intermational's Travel Agency Management System lets unauthenticated remote attackers inject arbitrary SQL to read, modify, and delete backend database contents. Rated CVSS 4.0 9.3 (Critical) with a fully network-exploitable, no-privilege, no-interaction vector, it was disclosed via Taiwan's TWCERT/CC. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
SQL injection in Win Men Intermational's Travel Agency Management System lets unauthenticated remote attackers inject arbitrary SQL to read, modify, and delete backend database contents. Rated CVSS 4.0 9.3 (Critical) with a fully network-exploitable, no-privilege, no-interaction vector, it was disclosed via Taiwan's TWCERT/CC. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.