22 matches found
PT-2026-97624
Name of the Vulnerable Software and Affected Versions pmTicket Project-Management-Software versions up to 078fa56a782490c5059a0814f84df27984f4d7e2 Description A remote SQL injection is possible due to improper handling of the conn settings argument within the setSync function of the '/ajax/add...
EUVD-2023-30897
Malicious code in bioql PyPI...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27112
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27112: Improper Neutralization of Special Elements used in an SQL Command
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27113: Improper Neutralization of Special Elements used in an SQL Command
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
Sql injection
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...
CVE-2018-11032
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...
PHPRAP SQL Injection Vulnerability
PHPRAP is a PHP-based lightweight open source document management system . A SQL injection vulnerability exists in PHPRAP versions 1.0.4 through 1.0.8. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'search' function in the...
CVE-2018-11032: Improper Neutralization of Special Elements used in an SQL Command
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...
CVE-2015-2144: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 project name parameter to project.php; the 2 usejs parameter to user.php; the 3 usejs parameter to group.php; the 4...
CVE-2015-2142: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to 1 hijack the authentication of users for requests that cause an unspecified impact via the id parameter to project.php, 2 hijack the authentication of users for...
CVE-2015-2146: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to project.php, the 2 groupid parameter to group.php, the 3 statusid parameter to status.php, the 4 resolutionid parameter to...
creccom.org XSS vulnerability
Vulnerable URL: http://www.creccom.org/project.php?project=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E31 Details: Description| Value ---|--- Patched:| Yes, at 18.06.2017 Latest check for patch:| 18.06.2017 20:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
phpBugTracker 1.6.0 - Multiple Vulnerabilities
Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in phpBugTracker v.1.6.0 Advisory ID: SROEADV-2015-16 Author: Steffen Rösemann Affected Software: phpBugTracker v.1.6.0 Vendor URL: https://github.com/a-v-k/phpBugTracker Vendor Status: patched CVE-ID: will asked to be...
CVE-2008-1864: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL commands via the project parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web script or HTML via certain inputs to 1 accverify.php or 2 project.php...