Lucene search
+L

48 matches found

Cvelist
Cvelist
added 2024/12/26 1:31 p.m.35 views

CVE-2024-12953 1000 Projects Portfolio Management System MCA update_pd_process.php unrestricted upload

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown functionality of the file /updatepdprocess.php. The manipulation of the argument profile leads to unrestricted upload. The attack may be...

6.5CVSS0.00711EPSS
Exploits1References5
NVD
NVD
added 2024/12/26 1:15 p.m.35 views

CVE-2024-12951

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /addpersonaldetails.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS0.00687EPSS
Exploits1References5
CVE
CVE
added 2024/12/26 12:31 p.m.53 views

CVE-2024-12951

CVE-2024-12951 affects the 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is in an unknown function of the file /add_personal_details.php, where manipulation of the profile argument leads to unrestricted file upload. It can be exploited remotely, and exploits have been publi...

9.8CVSS6.6AI score0.00687EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/12/26 12:31 p.m.32 views

CVE-2024-12951 1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /addpersonaldetails.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The...

6.5CVSS0.00687EPSS
Exploits1References5
CVE
CVE
added 2024/12/26 8:0 a.m.61 views

CVE-2024-12942

CVE-2024-12942 affects 1000 Projects Portfolio Management System MCA 1.0. A SQL injection vulnerability exists in an unknown function of /admin/admin_login.php triggered by manipulating the username/password parameters. Attacks can be launched remotely, and the exploit has been publicly disclosed...

9.8CVSS7.5AI score0.00649EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2024/11/27 12:15 a.m.12 views

CVE-2024-11819

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgotpasswordprocess.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS0.00628EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/11/26 11:31 p.m.21 views

CVE-2024-11819 1000 Projects Portfolio Management System MCA forgot_password_process.php sql injection

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgotpasswordprocess.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploi...

7.5CVSS0.00628EPSS
Exploits1References5
CVE
CVE
added 2024/11/15 7:31 p.m.51 views

CVE-2024-11256

CVE-2024-11256 details (NORMAL) : Affects 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is a SQL injection in the login.php flow caused by unsafely handling the username parameter, enabling remote abuse. Descriptions consistently classify this as critical with potential rem...

9.8CVSS7.7AI score0.00671EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder