CVE-2025-9927: projectworlds Travel Management System viewpackage.php sql injection
A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewpackage.php. Such manipulation of the argument t1 leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9927?
CVE-2025-9927 has been classified as a high severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-9927?
To fix CVE-2025-9927, validate and sanitize user inputs in the /viewpackage.php file to prevent SQL injection.
Can CVE-2025-9927 be exploited remotely?
Yes, CVE-2025-9927 can be exploited remotely by manipulating the argument t1 in the affected function.
What are the potential impacts of CVE-2025-9927?
The potential impacts of CVE-2025-9927 include unauthorized data access and manipulation through SQL injection attacks.
Is there a patch available for CVE-2025-9927?
As of now, there is no specific patch released for CVE-2025-9927, but it is crucial to secure the application by implementing best coding practices.