CVE-2026-9584

A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

EUVD-2026-32004

A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

CVE-2026-9584: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

UCMS Access Control Error Vulnerability

UCMS is a simple and efficient PHP open source website building system. An access control error vulnerability exists in /ucms/chk.php in UCMS 1.4.8. The vulnerability originates from a network system or product that does not properly restrict access to resources from unauthorized roles, which cou...

PT-2020-15876

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.8 Description An issue exists where incorrect access control in the "/ucms/chk.php" endpoint results in an information leak via an error message when directly accessing a website built by UCMS. Recommendations For UCMS version...

CVE-2020-24981: Undefined Security Weakness

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...