CVE-2025-9925 projectworlds Travel Management System detail.php sql injection

A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2025-9925

CVE-2025-9925 : In projectworlds Travel Management System 1.0, the pid parameter in /detail.php is vulnerable to SQL injection due to improper validation. This enables remote attackers to execute arbitrary SQL, with public exploit availability. Remediation guidance from PT Security suggests restr...

PT-2025-35829

Name of the Vulnerable Software and Affected Versions projectworlds Travel Management System version 1.0 Description A SQL injection issue exists due to the manipulation of the pid argument in the processing of the /detail.php file. This can be exploited remotely. The exploit has been made public...

Projectworlds Travel management System SQL注入漏洞

Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter pid in the file /detail.php. An attacker can exploit this vulnerability to...

CVE-2025-9925: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

PT-2025-35850

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2415 B20250515 Description: A command injection issue exists in the sub 410C34 function of the /cgi-bin/cstecgi.cgi file. Manipulation of the pid argument can lead to remote code execution. The exploit has been...

CVE-2025-9726

A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the...

PT-2025-36663

In syna cdev ioctl store pid of syna tcm2 sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-9726

A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the...

CVE-2025-9726

A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the...

CVE-2025-9726

CVE-2025-9726 affects Campcodes Farm Management System 1.0, with a vulnerability in the /review.php pid parameter enabling SQL injection. A remote attacker could exploit it and public exploit code is noted in multiple sources. The current connected documents do not provide a confirmed patch or fi...

CVE-2025-9726: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the...

Linux Distros Unpatched Vulnerability : CVE-2020-28935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow fo...

Linux Distros Unpatched Vulnerability : CVE-2017-14609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrar...

CVE-2025-9425

The CVE-2025-9425 entry concerns itsourcecode Online Tour and Travel Management System v1.0. The vulnerability is described as a SQL injection in the /enquiry.php file caused by manipulating the pid parameter, with remote exploitation reportedly possible and the exploit publicly released. Multipl...

PT-2025-34718 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A security flaw exists in itsourcecode Online Tour and Travel Management System version 1.0. The issue involves SQL injection in the /enquiry.php file through...

CVE-2025-9425: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection. The attack is possible to be carried out remotely...

Linux Distros Unpatched Vulnerability : CVE-2017-14159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary process...

Linux Distros Unpatched Vulnerability : CVE-2018-6536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow...

Linux Distros Unpatched Vulnerability : CVE-2023-39947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and...