34 matches found
PT-2026-97624
Name of the Vulnerable Software and Affected Versions pmTicket Project-Management-Software versions up to 078fa56a782490c5059a0814f84df27984f4d7e2 Description A remote SQL injection is possible due to improper handling of the conn settings argument within the setSync function of the '/ajax/add...
EUVD-2023-30897
Malicious code in bioql PyPI...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
PT-2025-1385
Name of the Vulnerable Software and Affected Versions pearProjectApi version 2.8.10 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the organizationCode parameter at the "project.php" endpoint. Recommendations For pearProjectApi version...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27112: Improper Neutralization of Special Elements used in an SQL Command
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27113: Improper Neutralization of Special Elements used in an SQL Command
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27112
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27113
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php...
CVE-2023-27112
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
PT-2024-16270
Name of the Vulnerable Software and Affected Versions Project Worlds Student Project Allocation System version 1.0 Description A critical issue was found in the Project Selection Page component, specifically in the file /student/project selection/move up project.php. The manipulation of the up...
PT-2021-10498
Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue arises from the failure of certain files, specifically control task.php, control project.php, and default user.php, to filter the sort parameter, leading to a SQL injection...
Sql injection
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...
CVE-2018-11032
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...
PT-2018-10254
Name of the Vulnerable Software and Affected Versions PHPRAP versions 1.0.4 through 1.0.8 Description The issue is related to SQL Injection, which occurs via the search function in the application/home/controller/project.php file. Recommendations For PHPRAP versions 1.0.4 through 1.0.8, consider...
CVE-2018-11032: Improper Neutralization of Special Elements used in an SQL Command
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...
PHPRAP SQL Injection Vulnerability
PHPRAP is a PHP-based lightweight open source document management system . A SQL injection vulnerability exists in PHPRAP versions 1.0.4 through 1.0.8. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'search' function in the...
CVE-2018-11032
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...
CVE-2015-2146
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to project.php, the 2 groupid parameter to group.php, the 3 statusid parameter to status.php, the 4 resolutionid parameter to...