CVE-2024-12950

The CVE-2024-12950 entry concerns code-projects/projectworlds Travel Management System v1.0, where the parameter catid in /subcat.php allows SQL injection. The root cause is improper handling/manipulation of the catid argument, leading to a remote, unauthenticated injection with potential impact ...

CVE-2024-12949

CVE-2024-12949 affects the code-projects Travel Management System 1.0. The vulnerability is an SQL injection in the unknown code of /package.php caused by improper handling of the subcatid parameter. It is exploitable remotely and the exploit has been disclosed publicly. Impact is described with ...

CVE-2024-12948

CVE-2024-12948 affects the Code-Projects Travel Management System 1.0. The vulnerability is a SQL injection in an unknown portion of /detail.php triggered by manipulating the pid parameter. The issue is exploitable remotely and, per sources, the exploit has been disclosed publicly. Practical impa...