CyberSec.Space Logo
Back to CVE Browser

CVE-2021-25213

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0160%
EPSS Percentile11.40th
PublishedJul 22, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php.

Affected Platforms (CPE)

📦
Travel Management System Project

Travel Management System

= 1.0

References & Advisories

🔗 https://github.com/BigTiger2020/Travel-Management-System/blob/main/Travel%20Management%20System-sql.md
🔗 https://github.com/BigTiger2020/Travel-Management-System/blob/main/Travel%20Management%20System-sql.md

Related Vulnerabilities

CVE-2020-242039.8

Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel M...

CVE-2021-252089.8

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code vi...

CVE-2021-3467910.0

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

CVE-2021-021110.0

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon ...

CVE-2021-25213 Detail & Impact Analysis | CVSS 9.8 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space