Travel Management System

DATE	CVE	VULNERABILITY TITLE	RISK
2024-11-04	CVE-2024-51326	SQL Injection vulnerability in Projectworlds Travel Management System 1.0 SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php. network low complexity projectworlds CWE-89	7.5
2024-11-04	CVE-2024-51327	SQL Injection vulnerability in Projectworlds Travel Management System 1.0 SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields. network low complexity projectworlds CWE-89 critical	9.8
2021-05-17	CVE-2020-29205	Cross-site Scripting vulnerability in Projectworlds Travel Management System 1.0 XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field network low complexity projectworlds CWE-79	6.1
2020-08-27	CVE-2020-24203	Forced Browsing vulnerability in Projectworlds Travel Management System 1.0 Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code execution. network low complexity projectworlds CWE-425 critical	9.8