← CVE Intelligence

CVE-2025-9924

projectworlds Travel Management System enquiry.php sql injection PUBLISHED

Description (CNA)

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / productVersions
projectworlds / Travel Management Systemaffected 1.0

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.