CVE-2021-25213

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-07-22

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Travel Management System (Travel Management System Project)

References

• https://github.com/BigTiger2020/Travel-Management-System/blob/main/Travel%20Management%20System-sql.md