6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the file /viewsubcategory.php. This manipulation of the argument t1 causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Basic Information
ID
CVE-2025-9926
Source
VulDB
Published
Sep 3, 2025 at 20:02
Modified
Sep 3, 2025 at 20:13
Affected Product
Vendor
projectworlds
Product
Travel Management System
Version
1.0
Affected Versions
projectworlds Travel Management System 1.0