CVE Catalog
CVE-2026-19425
CriticalCVSS 9.8Summary
Travel Agency Management System developed by Win Men International has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents.
Risk Assessment
Attackers can gain unauthorized access to data, compromise its integrity, or cause data loss, leading to serious business consequences.
Recommendation
Apply vendor patches or implement input validation and parameterized queries.
Original NVD description (English source)
Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents.