CVE-2025-11135: Deserialization of Untrusted Data

A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The affected element is the function loadLanguage of the file classes/class.database.php of the component Cookie Handler. Performing manipulation of the argument userid results in...

CVE-2025-7886

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

CVE-2025-7886

CVE-2025-7886 affects pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The vulnerability is a SQL injection in getUserLanguage of classes/class.database.php caused by manipulation of the user_id argument. Remote exploitation is possible. The documentation indic...

CVE-2025-7886: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

CVE-2006-5838: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the path parameter...