Vendor
The Travel Agency Management System by Win Men International contains an unauthenticated SQL injection vulnerability allowing remote adversaries to read, modify, or delete database content.