CVE-2025-9924: projectworlds Travel Management System enquiry.php sql injection
A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9924?
CVE-2025-9924 is classified as a high severity vulnerability due to its potential for remote exploitation through SQL injection.
How do I fix CVE-2025-9924?
To fix CVE-2025-9924, validate and sanitize all user inputs to prevent SQL injection attacks.
What type of vulnerability is CVE-2025-9924?
CVE-2025-9924 is an SQL injection vulnerability affecting the enquiry.php file in the Travel Management System.
Can CVE-2025-9924 be exploited remotely?
Yes, CVE-2025-9924 allows for remote exploitation, making it critical to address promptly.
Which software is affected by CVE-2025-9924?
CVE-2025-9924 affects version 1.0 of the Projectworlds Travel Management System.