NetSight
critical9.8

CVE-2021-25213

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid paramet…

Impact

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php.

Affected products

VendorProductAffected versions
Travel Management System ProjectTravel Management System
Version 1.0

Weakness classification

References