2 matches found
CVE-2024-51327
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields...
8.7AI score0.00804EPSS
SaveExploits1References2
CVE-2024-51327: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields...
9.8CVSS5.9AI score0.00804EPSS
SaveExploits1References1
20