CVE-2025-9928: projectworlds Travel Management System viewcategory.php sql injection
A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown function of the file /viewcategory.php. Performing manipulation of the argument t1 results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9928?
CVE-2025-9928 is classified as a high severity vulnerability due to its potential for remote exploitation through SQL injection.
How do I fix CVE-2025-9928?
To fix CVE-2025-9928, validate and sanitize all user inputs in the /viewcategory.php file before processing.
Who is affected by CVE-2025-9928?
CVE-2025-9928 affects users of Projectworlds Travel Management System version 1.0.
What type of vulnerability is CVE-2025-9928?
CVE-2025-9928 is an SQL injection vulnerability that allows an attacker to manipulate database queries.
Can CVE-2025-9928 be exploited remotely?
Yes, CVE-2025-9928 can be exploited remotely, allowing attackers to initiate SQL injection attacks from outside the target system.