← CVE Intelligence

CVE-2025-9050

projectworlds Travel Management System addcategory.php sql injection PUBLISHED

Description (CNA)

A vulnerability was found in projectworlds Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /addcategory.php. The manipulation of the argument t1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / productVersions
projectworlds / Travel Management Systemaffected 1.0

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.