CVE-2025-9924

The CVE-2025-9924 entry concerns projectworlds Travel Management System 1.0 with a SQL injection flaw in /enquiry.php caused by unsafely handling the t2 parameter. Exploitation is remote and public, with various sources confirming the issue across NVD, Red Hat and other feeds. The root cause is a...