TM
Product
Travel Management System
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 2Medium 2Low 0
Watch
Add Travel Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9928 | 9.8 | Sep 3 | A security flaw has been discovered in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2025-9927 | 9.8 | Sep 3 | A vulnerability was identified in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2025-9926 | 9.8 | Sep 3 | A vulnerability was determined in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2025-9925 | 9.8 | Sep 3 | A vulnerability was found in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2025-9924 | 9.8 | Sep 3 | A vulnerability has been found in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2025-9053 | 9.8 | Aug 15 | A vulnerability has been found in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2025-9052 | 9.8 | Aug 15 | A vulnerability was identified in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2025-9051 | 9.8 | Aug 15 | A vulnerability was determined in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2025-9050 | 9.8 | Aug 15 | A vulnerability was found in projectworlds Travel Management System 1.0 Affected: 1.0 |
| CVE-2024-51327 | 9.8 | Nov 4 | SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password'… Affected: 1.0 |
| CVE-2020-24203 | 9.8 | Aug 27 | Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote… Affected: 1.0 |
| CVE-2024-12950 | 8.8 | Dec 26 | code-projects/projectworlds Travel Management System subcat.php sql injection Affected: 1.0 |
| CVE-2024-51326 | 7.5 | Nov 4 | SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php Affected: 1.0 |
| CVE-2024-51328 | 6.1 | Nov 4 | Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter Affected: 1.0 |
| CVE-2020-29205 | 6.1 | May 17 | XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field Affected: 1.0 |
Showing 15