22 matches found
CVE-2026-3057
A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...
CVE-2026-3057
A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...
CVE-2026-3057
A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...
CVE-2026-3057 a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection
A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...
PT-2026-21654
Name of the Vulnerable Software and Affected Versions a54552239 pearProjectApi versions up to 2.8.10 Description A security flaw exists in a54552239 pearProjectApi. The dateTotalForProject function within the application/common/Model/Task.php file of the Backend Interface component is susceptible...
CVE-2026-3057: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be...
EUVD-2023-30896
Malicious code in bioql PyPI...
EUVD-2023-30897
Malicious code in bioql PyPI...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27112
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27112
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27112: Improper Neutralization of Special Elements used in an SQL Command
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27112
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
PT-2025-1384 · Unknown · Pearprojectapi
Name of the Vulnerable Software and Affected Versions: pearProjectApi version 2.8.10 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the projectCode parameter at the "project.php" endpoint. Recommendations: For pearProjectApi version...
CVE-2023-27113
The pearProjectApi version v2.8.10 is vulnerable to a SQL injection (CWE-89) vulnerability. The flaw exists within the organizationCode parameter at the project.php endpoint, allowing for unauthorized database interaction. This is a project management system backend interface for individual devel...
CVE-2023-27112
pearProjectApi version v2.8.10 is vulnerable to a SQL injection vulnerability (CWE-89). The flaw exists because the projectCode parameter at the project.php endpoint is not properly neutralized. Attackers could exploit this to interact with the backend database. As a temporary workaround, users s...
CVE-2023-27112
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
