TI-2025-09109 CVE-2025-9928 · GHSA-8g93-2g28-pqwc
projectworlds Travel Management System viewcategory.php sql injection
Priority HIGH 70
A security flaw has been discovered in projectworlds Travel Management System 1.0.
Vulnerabilities
14 records
TI-2025-09108 CVE-2025-9927 · GHSA-qp44-qmw4-g8xw
projectworlds Travel Management System viewpackage.php sql injection
Priority HIGH 70
A vulnerability was identified in projectworlds Travel Management System 1.0.
TI-2025-09107 CVE-2025-9926 · GHSA-2c6q-77jp-q575
projectworlds Travel Management System viewsubcategory.php sql injection
Priority HIGH 72
A vulnerability was determined in projectworlds Travel Management System 1.0.
TI-2025-09106 CVE-2025-9925 · GHSA-wcfm-c49p-2xxc
projectworlds Travel Management System detail.php sql injection
Priority HIGH 72
A vulnerability was found in projectworlds Travel Management System 1.0.
TI-2025-09105 CVE-2025-9924 · GHSA-7gc4-jq87-pxj4
projectworlds Travel Management System enquiry.php sql injection
Priority HIGH 70
A vulnerability has been found in projectworlds Travel Management System 1.0.
TI-2025-08297 CVE-2025-9053 · GHSA-pxjv-27rf-2w76
projectworlds Travel Management System updatesubcategory.php sql injection
Priority HIGH 70
A vulnerability has been found in projectworlds Travel Management System 1.0.
TI-2025-08296 CVE-2025-9052 · GHSA-j88j-8rf7-r4rh
projectworlds Travel Management System updatepackage.php sql injection
Priority HIGH 70
A vulnerability was identified in projectworlds Travel Management System 1.0.
TI-2025-08295 CVE-2025-9051 · GHSA-qm8r-mxj3-48rp
projectworlds Travel Management System updatecategory.php sql injection
Priority HIGH 70
A vulnerability was determined in projectworlds Travel Management System 1.0.
TI-2025-08294 CVE-2025-9050 · GHSA-g3j2-xxjf-f259
projectworlds Travel Management System addcategory.php sql injection
Priority HIGH 70
A vulnerability was found in projectworlds Travel Management System 1.0.
TI-2024-34329 CVE-2024-51328 · GHSA-38w9-w6h5-wfxm
Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management…
Priority MEDIUM 60
Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.
TI-2024-34328 CVE-2024-51327 · GHSA-hm22-mpqr-wp46
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows…
Priority HIGH 82
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.
TI-2024-34327 CVE-2024-51326 · GHSA-f63j-xmq2-hrpg
SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a…
Priority HIGH 72
SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.
TI-2020-17600 CVE-2020-29205 · GHSA-2c5f-4477-2248
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker…
Priority LOW 30
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
TI-2020-14839 CVE-2020-24203 · GHSA-mwjj-8f4v-rq25
Insecure File Permissions and Arbitrary File Upload in the upload pic function in…
Priority MEDIUM 48
Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code executio…