Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Travel APPS: before v17.0.68.
Metrics
CVSS 3.1 4.6/10
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Jun 27, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified