| عنوان | oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635 SQL Injection |
|---|
| الوصف | The affected component is `contact_insert.php`, the public contact-form handler (no authentication whatsoever):
```php
$query_insert=mysqli_query($con,"INSERT INTO contact(`name`, `company`, `email`, `topic`, `phone`, `comments`)
VALUES ('$name', '$company', '$email', '$topic', '$phone', '$comments')" ) or die(mysqli_error($con));
```
All six form fields are concatenated into the `INSERT` statement without escaping. An anonymous visitor can close the quoted value and append additional tuples, inserting arbitrary fabricated rows into the `contact` table with one request - e.g. a crafted `name` value inserts an extra record of the attacker's choosing. The `or die(mysqli_error($con))` also leaks database error details in responses.
|
|---|
| المصدر | ⚠️ https://github.com/oretnom23/php-travel-agency-system/issues/10 |
|---|
| المستخدم | Weaster (UID 102044) |
|---|
| ارسال | 11/10/2026 03:46 PM (26 أيام منذ) |
|---|
| الاعتدال | 27/10/2026 10:01 AM (16 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 427082 [oretnom23 php-travel-agency-system Contact Form contact_insert.php name/company/email/topic/phone/comments حقن SQL] |
|---|
| النقاط | 20 |
|---|