CVE-2025-7886

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

CVE-2025-7886

CVE-2025-7886 affects pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The vulnerability is a SQL injection in getUserLanguage of classes/class.database.php caused by manipulation of the user_id argument. Remote exploitation is possible. The documentation indic...