Remote Code Execution via Addcategory.php
CVE-2024-51328

Currently unrated

Key Information:

Vendor: projectworld
Status: Travel Management System
Vendor: CVE Published:; 4 November 2024

🔔 Create projectworld Vulnerability Alert

What is CVE-2024-51328?

Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.

References

https://projectworlds.in/

https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51328...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 4, 2024