Travel management system

This hub aggregates every CVE we track for Travel management system, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Travel management system.

• CVE-2025-9928projectworlds Travel Management System viewcategory.php sql injection7.3Sep 3, 2025
• CVE-2025-9927projectworlds Travel Management System viewpackage.php sql injection7.3Sep 3, 2025
• CVE-2025-9926projectworlds Travel Management System viewsubcategory.php sql injection7.3Sep 3, 2025
• CVE-2025-9925projectworlds Travel Management System detail.php sql injection7.3Sep 3, 2025
• CVE-2025-9924projectworlds Travel Management System enquiry.php sql injection7.3Sep 3, 2025
• CVE-2025-9053projectworlds Travel Management System updatesubcategory.php sql injection7.3Aug 15, 2025
• CVE-2025-9052projectworlds Travel Management System updatepackage.php sql injection7.3Aug 15, 2025
• CVE-2025-9051projectworlds Travel Management System updatecategory.php sql injection7.3Aug 15, 2025
• CVE-2025-9050projectworlds Travel Management System addcategory.php sql injection7.3Aug 15, 2025
• CVE-2025-0229code-projects Travel Management System enquiry.php sql injection6.3Jan 5, 2025
• CVE-2024-12950code-projects/projectworlds Travel Management System subcat.php sql injection6.3Dec 26, 2024
• CVE-2024-12949code-projects Travel Management System package.php sql injection6.3Dec 26, 2024
• CVE-2024-12948code-projects Travel Management System detail.php sql injection6.3Dec 26, 2024
• CVE-2024-51328Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.6.1Nov 4, 2024
• CVE-2024-51327SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.9.8Nov 4, 2024