CVE-2025-9925

CriticalCVSS 9.8/10Last modified Oct 1, 2026

Description

A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Sep 3, 2025
Last modified: Oct 1, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-99269.8A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the file /viewsubcategory.p CVE-2025-99279.8A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewp CVE-2025-99289.8A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown function of the file /CVE-2025-99294.8A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogs_view.php. Execu CVE-2025-99309.8A security vulnerability has been detected in 1000projects Beauty Parlour Management System 1.0. This impacts an unknown function of the fil CVE-2025-99316.1A vulnerability was detected in Jinher OA 1.0. Affected is an unknown function of the file /jc6/platform/sys/login!changePassWord.action of CVE-2025-99329.8A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the CVE-2025-99339.8A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of t CVE-2025-99349.8A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415_B20250515. This affects the function sub_410C34 of the file /cgi-bin/cstecgi.cgi. CVE-2025-99359.8A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web CVE-2025-99364.3A vulnerability was identified in fuyang_lipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. Th CVE-2025-99375.4A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The