| Titel | oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635 SQL Injection |
|---|
| Beschreibung | The affected component is `contact_insert.php`, the public contact-form handler (no authentication whatsoever):
```php
$query_insert=mysqli_query($con,"INSERT INTO contact(`name`, `company`, `email`, `topic`, `phone`, `comments`)
VALUES ('$name', '$company', '$email', '$topic', '$phone', '$comments')" ) or die(mysqli_error($con));
```
All six form fields are concatenated into the `INSERT` statement without escaping. An anonymous visitor can close the quoted value and append additional tuples, inserting arbitrary fabricated rows into the `contact` table with one request - e.g. a crafted `name` value inserts an extra record of the attacker's choosing. The `or die(mysqli_error($con))` also leaks database error details in responses.
|
|---|
| Quelle | ⚠️ https://github.com/oretnom23/php-travel-agency-system/issues/10 |
|---|
| Benutzer | Weaster (UID 102044) |
|---|
| Einreichung | 11.10.2026 15:46 (vor 26 Tagen) |
|---|
| Moderieren | 27.10.2026 10:01 (16 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 427082 [oretnom23 php-travel-agency-system Contact Form contact_insert.php name/company/email/topic/phone/comments SQL Injection] |
|---|
| Punkte | 20 |
|---|