CVE-2026-3057

A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...

CVE-2026-3057

A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...

CVE-2026-3057 a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection

A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...

CVE-2026-3057

A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...

PT-2026-21654

Name of the Vulnerable Software and Affected Versions a54552239 pearProjectApi versions up to 2.8.10 Description A security flaw exists in a54552239 pearProjectApi. The dateTotalForProject function within the application/common/Model/Task.php file of the Backend Interface component is susceptible...

CVE-2026-3057: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...

EUVD-2023-30896

Malicious code in bioql PyPI...

EUVD-2023-30897

Malicious code in bioql PyPI...

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

CVE-2023-27112

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...

CVE-2023-27112

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

PT-2025-1385

Name of the Vulnerable Software and Affected Versions pearProjectApi version 2.8.10 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the organizationCode parameter at the "project.php" endpoint. Recommendations For pearProjectApi version...

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

CVE-2023-27112: Improper Neutralization of Special Elements used in an SQL Command

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...

CVE-2023-27113: Improper Neutralization of Special Elements used in an SQL Command

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

CVE-2023-27113

The pearProjectApi version v2.8.10 is vulnerable to a SQL injection (CWE-89) vulnerability. The flaw exists within the organizationCode parameter at the project.php endpoint, allowing for unauthorized database interaction. This is a project management system backend interface for individual devel...

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

CVE-2023-27112

pearProjectApi version v2.8.10 is vulnerable to a SQL injection vulnerability (CWE-89). The flaw exists because the projectCode parameter at the project.php endpoint is not properly neutralized. Attackers could exploit this to interact with the backend database. As a temporary workaround, users s...