CVE-2020-37004 Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage

The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to extract usernames and password hashes from the tblusers database table. Attackers can exploit the /frontend/getarticlesuggestion/ endpoint by crafting malicious search paramete...

CodexCube Ultimate Project Manager CRM PRO SQL Injection Vulnerability

CodexCube Ultimate Project Manager CRM PRO is a comprehensive business management platform developed by CodexCube Corporation. Version 2.0.5 of CodexCube Ultimate Project Manager CRM PRO contains a SQL injection vulnerability. This vulnerability stems from a blind SQL injection at the...

PT-2026-5279

Name of the Vulnerable Software and Affected Versions Ultimate Project Manager CRM PRO version 2.0.5 Description A blind SQL injection allows attackers to extract usernames and password hashes from the tbl users database table. This is achieved by crafting malicious search parameters at the...