critical9.8
CVE-2024-51327
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'usern…
Impact
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectworlds | Travel Management System | Version 1.0 |