Lucene search
+L

34 matches found

Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•12 views

PT-2026-97624

Name of the Vulnerable Software and Affected Versions pmTicket Project-Management-Software versions up to 078fa56a782490c5059a0814f84df27984f4d7e2 Description A remote SQL injection is possible due to improper handling of the conn settings argument within the setSync function of the '/ajax/add...

7.5CVSS5.7AI score0.00254EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-30897

Malicious code in bioql PyPI...

9.8CVSS5.4AI score0.00516EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:17 a.m.•18 views

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

9.8CVSS5.9AI score0.00516EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/21 10:15 p.m.•52 views

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

9.8CVSS0.00516EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•10 views

PT-2025-1385

Name of the Vulnerable Software and Affected Versions pearProjectApi version 2.8.10 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the organizationCode parameter at the "project.php" endpoint. Recommendations For pearProjectApi version...

9.8CVSS5.9AI score0.00516EPSS
SaveExploits1References8
Mend
Mend
•added 2025/01/21 12:00 a.m.•10 views

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

9.8CVSS5.9AI score0.00516EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/21 12:00 a.m.•7 views

CVE-2023-27112: Improper Neutralization of Special Elements used in an SQL Command

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...

9.8CVSS5.9AI score0.00516EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/21 12:00 a.m.•10 views

CVE-2023-27113: Improper Neutralization of Special Elements used in an SQL Command

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

9.8CVSS5.9AI score0.00516EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/21 12:00 a.m.•30 views

CVE-2023-27112

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...

0.00516EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/21 12:00 a.m.•37 views

CVE-2023-27113

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...

0.00516EPSS
SaveExploits1References1
Mend
Mend
•added 2025/01/21 12:00 a.m.•17 views

CVE-2023-27112

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...

9.8CVSS5.9AI score0.00516EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/10/27 12:00 a.m.•8 views

PT-2024-16270

Name of the Vulnerable Software and Affected Versions Project Worlds Student Project Allocation System version 1.0 Description A critical issue was found in the Project Selection Page component, specifically in the file /student/project selection/move up project.php. The manipulation of the up...

9.8CVSS6.3AI score0.00572EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2021/06/21 12:00 a.m.•6 views

PT-2021-10498

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue arises from the failure of certain files, specifically control task.php, control project.php, and default user.php, to filter the sort parameter, leading to a SQL injection...

7.5CVSS0.01669EPSS
SaveExploits1References5
Prion
Prion
•added 2018/05/14 12:29 a.m.•23 views

Sql injection

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

7.5CVSS9.9AI score0.01402EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2018/05/14 12:29 a.m.•26 views

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

9.8CVSS10AI score0.01402EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/05/14 12:00 a.m.•6 views

PT-2018-10254

Name of the Vulnerable Software and Affected Versions PHPRAP versions 1.0.4 through 1.0.8 Description The issue is related to SQL Injection, which occurs via the search function in the application/home/controller/project.php file. Recommendations For PHPRAP versions 1.0.4 through 1.0.8, consider...

9.8CVSS0.01402EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/14 12:00 a.m.•6 views

CVE-2018-11032: Improper Neutralization of Special Elements used in an SQL Command

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

9.8CVSS8.1AI score0.01402EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/05/14 12:00 a.m.•15 views

PHPRAP SQL Injection Vulnerability

PHPRAP is a PHP-based lightweight open source document management system . A SQL injection vulnerability exists in PHPRAP versions 1.0.4 through 1.0.8. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'search' function in the...

9.8CVSS8.6AI score0.01402EPSS
SaveExploits1References1
Mend
Mend
•added 2018/05/14 12:00 a.m.•5 views

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

9.8CVSS0.01402EPSS
SaveExploits1References1
Mend
Mend
•added 2017/10/06 10:00 p.m.•8 views

CVE-2015-2146

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to project.php, the 2 groupid parameter to group.php, the 3 statusid parameter to status.php, the 4 resolutionid parameter to...

9.8CVSS0.01394EPSS
SaveExploits0References2
Rows per page
Query Builder