25 matches found
PT-2025-1384 · Unknown · Pearprojectapi
Name of the Vulnerable Software and Affected Versions: pearProjectApi version 2.8.10 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the projectCode parameter at the "project.php" endpoint. Recommendations: For pearProjectApi version...
CVE-2023-27112: Improper Neutralization of Special Elements used in an SQL Command
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27113
The pearProjectApi version v2.8.10 is vulnerable to a SQL injection (CWE-89) vulnerability. The flaw exists within the organizationCode parameter at the project.php endpoint, allowing for unauthorized database interaction. This is a project management system backend interface for individual devel...
CVE-2023-27112
pearProjectApi version v2.8.10 is vulnerable to a SQL injection vulnerability (CWE-89). The flaw exists because the projectCode parameter at the project.php endpoint is not properly neutralized. Attackers could exploit this to interact with the backend database. As a temporary workaround, users s...
