| Title | oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635 SQL Injection |
|---|
| Description | The affected component is `contact_insert.php`, the public contact-form handler (no authentication whatsoever):
```php
$query_insert=mysqli_query($con,"INSERT INTO contact(`name`, `company`, `email`, `topic`, `phone`, `comments`)
VALUES ('$name', '$company', '$email', '$topic', '$phone', '$comments')" ) or die(mysqli_error($con));
```
All six form fields are concatenated into the `INSERT` statement without escaping. An anonymous visitor can close the quoted value and append additional tuples, inserting arbitrary fabricated rows into the `contact` table with one request - e.g. a crafted `name` value inserts an extra record of the attacker's choosing. The `or die(mysqli_error($con))` also leaks database error details in responses.
|
|---|
| Source | ⚠️ https://github.com/oretnom23/php-travel-agency-system/issues/10 |
|---|
| User | Weaster (UID 102044) |
|---|
| Submission | 10/11/2026 15:46 (21 days ago) |
|---|
| Moderation | 10/27/2026 10:01 (16 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 427082 [oretnom23 php-travel-agency-system Contact Form contact_insert.php name/company/email/topic/phone/comments sql injection] |
|---|
| Points | 20 |
|---|