Guoma

Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file `/updatesubcategory.php`. The manipulation of the argument `t1/s1` leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability exists in projectworlds Travel Management System 1.0, affecting an unknown functionality within the `/addcategory.php` file. Manipulation of the `t1` argument results in a SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: ProjectWorlds Travel Management System version 1.0 Description: A vulnerability exists in ProjectWorlds Travel Management System 1.0 related to SQL injection. The issue affects an unknown functionality within the `/updatecategory.php` file. Manipulation of the `t1` argument can lead to SQL injection, allowing for remote attacks. The exploit for this issue has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability was identified in projectworlds Travel Management System 1.0. This affects an unknown part of the file `/updatepackage.php`. The manipulation of the argument `s1` leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Projectworlds Visitor Management System version 1.0 Description: A vulnerability has been found in projectworlds Visitor Management System 1.0. The manipulation of the argument `rid` in an unknown function of the file `/visitor out.php` leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public. Recommendations: As a temporary workaround, consider restricting access to the `/visitor out.php` file until a fix is available. Sanitize the `rid` parameter before using it in any database queries.

Name of the Vulnerable Software and Affected Versions: projectworlds Visitor Management System version 1.0 Description: A vulnerability exists in projectworlds Visitor Management System 1.0, affecting the processing of the `/query data.php` file. Manipulation of the `dateF`/`dateP` argument results in a SQL injection. The attack can be initiated remotely, and the exploit has been publicly disclosed and may be used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: projectworlds Visitor Management System version 1.0 Description: A vulnerability was determined in projectworlds Visitor Management System 1.0. The manipulation of the argument `rid` in the file `/front.php` leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider restricting access to the `/front.php` file to minimize the risk of exploitation. Avoid using the `rid` parameter in the affected file `/front.php` until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: projectworlds Online Notes Sharing Platform version 1.0 Description: A vulnerability has been found in the file `/login.php` of the software. Manipulation of the `User` argument leads to a SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider restricting access to the `/login.php` file until a fix is available. Sanitize the `User` input parameter to prevent SQL injection attacks.