Lucene search
K

5 matches found

NVD
NVD
added 2026/04/27 6:16 p.m.2 views

CVE-2026-7143

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS0.00036EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/27 5:15 p.m.0 views

CVE-2026-7143

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS5.4AI score0.00036EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2026/04/27 5:15 p.m.3 views

CVE-2026-7143

CVE-2026-7143 affects the 1000 Projects Portfolio Management System MCA (up to version 1.0). The vulnerability is located in an unknown function of the file /admin/block_status.php, where improper handling of the q parameter enables SQL injection. A remote attacker could exploit this, and publicl...

6.5CVSS6.5AI score0.00036EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.2 views

1000 Projects Portfolio Management System MCA 注入漏洞

The 1000 Projects Portfolio Management System MCA is an open-source combination management system developed by 1000 Projects. Versions of the 1000 Projects Portfolio Management System MCA, including version 1.0 and earlier, had a SQL injection vulnerability. This vulnerability stemmed from the...

6.5CVSS6.7AI score0.00036EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.1 views

PT-2026-35498

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS6.4AI score0.00036EPSS
Exploits0References8
Rows per page
Query Builder