What’s Vulnerable › Vulnerabilities

CVE-2025-9924: projectworlds Travel Management System enquiry.php sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-03 · updated 2026-06-17
• Weakness: CWE-74

Description

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected products

• projectworlds Travel Management System: 1.0

References

• https://github.com/JunGu-W/cve/issues/7
• https://vuldb.com/?ctiid.322326
• https://vuldb.com/?id.322326
• https://vuldb.com/?submit.642578

Get alerted when CVE-2025-9924 or the next vulnerability affects your stack