high7.5
CVE-2024-51326
SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in delete…
Impact
SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectworlds | Travel Management System | Version 1.0 |