First published: Thu Jul 22 2021(Updated: )
SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Travel Management System Project Travel Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-25213 is a SQL injection vulnerability in SourceCodester Travel Management System v 1.0.
CVE-2021-25213 allows remote attackers to execute arbitrary SQL statements.
CVE-2021-25213 has a severity rating of critical (9.8).
To fix CVE-2021-25213, update the SourceCodester Travel Management System to a version that addresses the vulnerability.
You can find more information about CVE-2021-25213 at the following reference: [link](https://github.com/BigTiger2020/Travel-Management-System/blob/main/Travel%20Management%20System-sql.md).