CVE-2020-37004 Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage

The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to extract usernames and password hashes from the tblusers database table. Attackers can exploit the /frontend/getarticlesuggestion/ endpoint by crafting malicious search paramete...

PT-2026-5279

Name of the Vulnerable Software and Affected Versions Ultimate Project Manager CRM PRO version 2.0.5 Description A blind SQL injection allows attackers to extract usernames and password hashes from the tbl users database table. This is achieved by crafting malicious search parameters at the...

CodexCube Ultimate Project Manager CRM PRO SQL Injection Vulnerability

CodexCube Ultimate Project Manager CRM PRO is a comprehensive business management platform developed by CodexCube Corporation. Version 2.0.5 of CodexCube Ultimate Project Manager CRM PRO contains a SQL injection vulnerability. This vulnerability stems from a blind SQL injection at the...