CVE-2025-9051

ProjectWorlds Travel Management System 1.0 is affected by a SQL injection in the /updatecategory.php file via the t1 parameter. The vulnerability arises from unsafely handling input, enabling remote attackers to exploit it, with public disclosure of the exploit reported. Multiple connected source...