CVE-2024-12926

CVE-2024-12926 affects Codezips Project Management System version 1.0. The vulnerability is in /pages/forms/advanced.php, where manipulation of the name parameter leads to SQL injection. It can be exploited remotely and exploit details have been disclosed publicly. Practical impact includes poten...

CVE-2024-12926 Codezips Project Management System advanced.php sql injection

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

CVE-2024-12231

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-12231 CodeZips Project Management System index.php sql injection

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-12231 CodeZips Project Management System index.php sql injection

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-12231

CodeZips Project Management System 1.0 contains an SQL injection vulnerability in /index.php, triggered by manipulating the email parameter. Root cause is improper input handling, enabling remote exploitation with high impact on confidentiality, integrity, and availability. Public exploit informa...

CVE-2023-46773

Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation...

CVE-2023-45826 Authenticated SQL Injection in leantime

Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...

ProjeQtOr Project Management System v10.4.1 - Multiple XSS Vulnerabilities

Exploit Title: ProjeQtOr Project Management System V10.4.1 - Multiple XSS Version: V10.4.1 Bugs: Multiple XSS Technology: PHP Vendor URL: https://www.projeqtor.org Software Link: https://sourceforge.net/projects/projectorria/files/projeqtorV10.4.1.zip/download Date of found: 09.07.2023 Author:...

CVE-2023-1725 SSRF in Infoline Project Management System

Server-Side Request Forgery SSRF vulnerability in Infoline Project Management System allows Server Side Request Forgery. This issue affects Project Management System: before 4.09.31.125...

CVE-2023-1725

CVE-2023-1725 is a Server-Side Request Forgery (SSRF) vulnerability affecting the Infoline Project Management System prior to version 4.09.31.125. The issue is documented across multiple sources in the connected set, consistently identifying SSRF as the underlying weakness in this product/version...

PT-2023-17194

Name of the Vulnerable Software and Affected Versions Infoline Project Management System versions prior to 4.09.31.125 Description The issue is a Server-Side Request Forgery SSRF vulnerability in the Infoline Project Management System, allowing Server Side Request Forgery. Recommendations For...

Zentao Project Management System 17.0 - Authenticated Remote Code Execution Exploit

Exploit Title: Zentao Project Management System 17.0 - Authenticated Remote Code Execution RCE Exploit Author: mister0xf Software Link: https://github.com/easysoft/zentaopms Version: tested on 17.0 probably works also on newer/older versions Tested On: Kali Linux 2022.2 Exploit Tested Using: Pyth...

Zentao Project Management System 17.0 Remote Code Execution Exploit

Exploit Title: Zentao Project Management System 17.0 - Authenticated Remote Code Execution Exploit Author: mister0xf Software Link: https://github.com/easysoft/zentaopms Version: tested on 17.0 probably works also on newer/older versions Tested On: Kali Linux 2022.2 Exploit Tested Using: Python...

SQL Injection Vulnerability in the Project Management System of Beijing Zhuo Guan Technology Co.

Ltd. was founded in 2008, is a high-tech enterprise focusing on providing design institutes with a full range of products and information solutions, integrating software design, development, integration and consulting services as a whole. A SQL injection vulnerability exists in the project...

Information Disclosure Vulnerability in Jinshi Engineering Project Management System (CNVD-2021-28383)

Dongying Jinshi Software Co., Ltd. is a dual-soft enterprise founded on the basis of China University of Petroleum, the company specializes in construction industry management software development. There is an information leakage vulnerability in Jinshi Project Management System. An attacker can...

Information Leakage Vulnerability in Kingstone Engineering Project Management System

Dongying Jinshi Software Co., Ltd. is a dual-soft enterprise founded on the basis of China University of Petroleum, the company specializes in construction industry management software development. There is an information leakage vulnerability in Jinshi Project Management System. An attacker can...

SQL Injection Vulnerability in PM2 Project Management System of Beijing Bangyong Technology Co.

BONYON is committed to project management research and development, integrating project management consulting, software development, project management training and education as one of the professional foreign-funded companies. The PM2 project management system of Beijing BangYong Technology Co.,...

Teameyo Project Management System 1.0 - SQL Injection

Teameyo Project Management System 1.0 - SQL Injection Exploit Title: Teameyo - Project Management System 1.0 - SQL Injection Dork: N/A Date: 2019-01-28 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.teameyo.com/ Software Link:...

Teameyo Project Management System 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Teameyo - Project Management System 1.0 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.teameyo.com/ Software Link: https://codecanyon.net/item/teameyo-project-management-system/23142804 Version: 1.0...