CVE-2024-51326

SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php...

CVE-2024-51326

SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php...

CVE-2024-51326

Affected product: projectworlds Travel Management System v1.0. The vulnerability is a SQL Injection in deletesubcategory.php via the t2 parameter, enabling a remote attacker to potentially execute arbitrary code. Root cause: improper handling of user-supplied input in t2 leading to SQLi. Impact: ...