Lucene search
K

347 matches found

RedhatCVE
RedhatCVE
added 2 days ago4 views

CVE-2026-7143

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS6.5AI score0.00036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2 days ago4 views

CVE-2026-7144

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file updatepasswdprocess.php. The manipulation of the argument tempuser results in authorization bypass. The attack can be launched remotely. The exploit has been...

5.3CVSS5.2AI score0.00035EPSS
Exploits0References1
NVD
NVD
added 2026/04/27 6:16 p.m.0 views

CVE-2026-7144

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file updatepasswdprocess.php. The manipulation of the argument tempuser results in authorization bypass. The attack can be launched remotely. The exploit has been...

5.3CVSS0.00035EPSS
Exploits0References5
NVD
NVD
added 2026/04/27 6:16 p.m.2 views

CVE-2026-7143

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS0.00036EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/27 5:30 p.m.1 views

CVE-2026-7144 1000 Projects Portfolio Management System MCA update_passwd_process.php authorization

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file updatepasswdprocess.php. The manipulation of the argument tempuser results in authorization bypass. The attack can be launched remotely. The exploit has been...

5.3CVSS5.2AI score0.00035EPSS
Exploits0References5
CVE
CVE
added 2026/04/27 5:30 p.m.5 views

CVE-2026-7144

The CVE-2026-7144 entry concerns the 1000 Projects Portfolio Management System MCA 1.0. The vulnerability affects the file update_passwd_process.php, where manipulating the argument temp_user yields an authorization bypass. The vulnerability can be exploited remotely and, per the sources, the exp...

5.3CVSS5AI score0.00035EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/27 5:30 p.m.32 views

CVE-2026-7144 1000 Projects Portfolio Management System MCA update_passwd_process.php authorization

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file updatepasswdprocess.php. The manipulation of the argument tempuser results in authorization bypass. The attack can be launched remotely. The exploit has been...

5.3CVSS0.00035EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/27 5:30 p.m.3 views

EUVD-2026-25895

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file updatepasswdprocess.php. The manipulation of the argument tempuser results in authorization bypass. The attack can be launched remotely. The exploit has been...

5.3CVSS5.2AI score0.00035EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/27 5:15 p.m.1 views

EUVD-2026-25894

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS5.4AI score0.00036EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/27 5:15 p.m.26 views

CVE-2026-7143 1000 Projects Portfolio Management System MCA block_status.php sql injection

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS0.00036EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/27 5:15 p.m.0 views

CVE-2026-7143 1000 Projects Portfolio Management System MCA block_status.php sql injection

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS5.4AI score0.00036EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/27 5:15 p.m.1 views

CVE-2026-7143

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS5.4AI score0.00036EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2026/04/27 5:15 p.m.4 views

CVE-2026-7143

CVE-2026-7143 affects the 1000 Projects Portfolio Management System MCA (up to version 1.0). The vulnerability is located in an unknown function of the file /admin/block_status.php, where improper handling of the q parameter enables SQL injection. A remote attacker could exploit this, and publicl...

6.5CVSS6.5AI score0.00036EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.4 views

PT-2026-35499

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update passwd process.php. The manipulation of the argument temp user results in authorization bypass. The attack can be launched remotely. The exploit has been...

5.3CVSS4.9AI score0.00035EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.3 views

1000 Projects Portfolio Management System MCA 注入漏洞

The 1000 Projects Portfolio Management System MCA is an open-source combination management system developed by 1000 Projects. Versions of the 1000 Projects Portfolio Management System MCA, including version 1.0 and earlier, had a SQL injection vulnerability. This vulnerability stemmed from the...

6.5CVSS6.7AI score0.00036EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.4 views

1000 Projects Portfolio Management System MCA 授权问题漏洞

The 1000 Projects Portfolio Management System MCA is an open-source combination management system developed by 1000 Projects. Version 1.0 of the 1000 Projects Portfolio Management System MCA has a vulnerability related to authorization. This vulnerability stems from improper handling of the...

5.3CVSS5.8AI score0.00035EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.1 views

PT-2026-35498

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS6.4AI score0.00036EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2026/01/09 11:45 a.m.7 views

CVE-2010-0452

Multiple cross-site scripting XSS vulnerabilities in HP Project and Portfolio Management Center PPMC, formerly Mercury IT Governance 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.00667EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-8850

Malware in sbrugna...

4.3CVSS4.8AI score0.00146EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-18245

Malware in sbrugna...

9.8CVSS9.5AI score0.00296EPSS
Exploits0References2
Rows per page
Query Builder