CVE-2024-12950: code-projects/projectworlds Travel Management System subcat.php sql injection
A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12950?
CVE-2024-12950 has been rated as critical due to the potential for SQL injection.
How does CVE-2024-12950 affect the Travel Management System?
CVE-2024-12950 affects the processing of the file /subcat.php allowing remote SQL injection via the catid parameter.
How do I fix CVE-2024-12950?
To fix CVE-2024-12950, implement proper input validation and parameterized queries in the affected code.
Can CVE-2024-12950 be exploited remotely?
Yes, CVE-2024-12950 can be exploited remotely through manipulation of the catid parameter.
What impact does CVE-2024-12950 have on user data?
CVE-2024-12950 poses a risk to user data as it can allow attackers to execute arbitrary SQL queries on the database.