52 matches found
CVE-2026-100900
A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of the component Jira Import. The manipulation of the argument host/username/token leads to server-side request forgery. It i...
CVE-2026-100899
A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyReport.php of the component Timesheet Dashboard. Executing a manipulation of the argument filter can lead to sql...
CVE-2026-100900 DevaslanPHP project-management Jira Import jira-import updateJiraProjects server-side request forgery
A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of the component Jira Import. The manipulation of the argument host/username/token leads to server-side request forgery. It i...
EUVD-2026-88067
A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of the component Jira Import. The manipulation of the argument host/username/token leads to server-side request forgery. It i...
CVE-2026-100900
The DevaslanPHP project-management software (versions 1.2.1/1.2.2/1.2.3/1.2.4 and v2.0.0-beta1) is vulnerable to a server-side request forgery (SSRF) . The flaw exists in the updateJiraProjects function within the Jira Import component (file: /jira-import). An attacker can manipulate the host , u...
CVE-2026-100900 DevaslanPHP project-management Jira Import jira-import updateJiraProjects server-side request forgery
A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of the component Jira Import. The manipulation of the argument host/username/token leads to server-side request forgery. It i...
CVE-2026-100898
A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. Performing a manipulation of the argument filter results in...
CVE-2026-100899
A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyReport.php of the component Timesheet Dashboard. Executing a manipulation of the argument filter can lead to sql...
EUVD-2026-88066
A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyReport.php of the component Timesheet Dashboard. Executing a manipulation of the argument filter can lead to sql...
CVE-2026-100899 DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection
A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyReport.php of the component Timesheet Dashboard. Executing a manipulation of the argument filter can lead to sql...
CVE-2026-100899
The DevaslanPHP project-management system (versions 1.2.1, 1.2.2, 1.2.3, 1.2.4, and v2.0.0-beta1) is vulnerable to a SQL injection flaw. The issue resides in the whereRaw function within the app/Filament/Widgets/Timesheet/MonthlyReport.php file of the Timesheet Dashboard component. An attacker ca...
CVE-2026-100899 DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection
A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyReport.php of the component Timesheet Dashboard. Executing a manipulation of the argument filter can lead to sql...
CVE-2026-100898
A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. Performing a manipulation of the argument filter results in...
CVE-2026-100898
The DevaslanPHP project-management system (versions 1.2.1, 1.2.2, 1.2.3, 1.2.4, and 2.0.0-beta1) is vulnerable to SQL injection within the Timesheet Dashboard component. The flaw exists in the whereRaw function of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php, where a manipulation ...
EUVD-2026-88062
A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. Performing a manipulation of the argument filter results in...
CVE-2026-100898 DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection
A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. Performing a manipulation of the argument filter results in...
CVE-2026-100898 DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection
A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. Performing a manipulation of the argument filter results in...
PT-2026-99756
Name of the Vulnerable Software and Affected Versions DevaslanPHP project-management versions 1.2.1 through 1.2.4 DevaslanPHP project-management version v2.0.0-beta1 Description In the Jira Import component, the updateJiraProjects function within the /jira-import file is susceptible to server-sid...
PT-2026-99754
Name of the Vulnerable Software and Affected Versions DevaslanPHP project-management versions 1.2.1 through 1.2.4 DevaslanPHP project-management version 2.0.0-beta1 Description Remote SQL injection is possible within the Timesheet Dashboard component. The issue exists in the whereRaw function...
CVE-2026-100899: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyReport.php of the component Timesheet Dashboard. Executing a manipulation of the argument filter can lead to sql...