Medium severity4.6NVD Advisory· Published Jun 27, 2024· Updated Jun 17, 2026

CVE-2024-1153

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Travel APPS: before v17.0.68.

Affected products

Talyabilisim/Travel Apps
cpe:2.3:a:talyabilisim:travel_apps:*:*:*:*:*:*:*:*
Range: <17.0.68
Talya Informatics/Travel Appsllm-fuzzy2 versions
<17.0.68+ 1 more
- (no CPE)range: <17.0.68
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.usom.gov.tr/bildirim/tr-24-0809nvdBroken Link
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0809nvd

News mentions

No linked articles in our index yet.

cvss	0.299
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000