CVE-2024-51327

CRITICAL CVSS: 9.8 Published: 2024-11-04 Modified: 2026-06-17

Description

SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.

Affected Platforms

Projectworlds Travel Management System

Weakness Type

CWE-89, CWE-89

References

https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51327%20-%20SQLi%20Auth%20By…
https://projectworlds.in/