Skip to content
OpenAdvisories
Medium · 4.6 CVE-2024-1153 EUVD-2024-16922GHSA-w64q-m54g-vjw3

SQL Injection Vulnerability in Talya Informatics' Travel APPS

Published Jun 27, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Travel APPS: before v17.0.68.

Affected products

VendorProductAffectedFixed
Talya Informatics Travel APPS < v17.0.68 v17.0.68

References