| Título | oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635 SQL Injection |
|---|
| Descrição | The affected component is `contact_insert.php`, the public contact-form handler (no authentication whatsoever):
```php
$query_insert=mysqli_query($con,"INSERT INTO contact(`name`, `company`, `email`, `topic`, `phone`, `comments`)
VALUES ('$name', '$company', '$email', '$topic', '$phone', '$comments')" ) or die(mysqli_error($con));
```
All six form fields are concatenated into the `INSERT` statement without escaping. An anonymous visitor can close the quoted value and append additional tuples, inserting arbitrary fabricated rows into the `contact` table with one request - e.g. a crafted `name` value inserts an extra record of the attacker's choosing. The `or die(mysqli_error($con))` also leaks database error details in responses.
|
|---|
| Fonte | ⚠️ https://github.com/oretnom23/php-travel-agency-system/issues/10 |
|---|
| Utilizador | Weaster (UID 102044) |
|---|
| Submissão | 11/10/2026 15h46 (há 16 dias) |
|---|
| Moderação | 27/10/2026 10h01 (16 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 427082 [oretnom23 php-travel-agency-system Contact Form contact_insert.php name/company/email/topic/phone/comments Injeção SQL] |
|---|
| Pontos | 20 |
|---|