5 matches found
PearProject SQL Injection Vulnerability
PearProject is a project management system backend interface developed by Vilson as an individual project. Versions of PearProject 2.8.10 and earlier had a SQL injection vulnerability. This vulnerability stemmed from the improper handling of the projectCode parameter in the dateTotalForProject...
EUVD-2023-30896
Malicious code in bioql PyPI...
CVE-2023-27112
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php...
CVE-2023-27112
pearProjectApi version v2.8.10 is vulnerable to a SQL injection vulnerability (CWE-89). The flaw exists because the projectCode parameter at the project.php endpoint is not properly neutralized. Attackers could exploit this to interact with the backend database. As a temporary workaround, users s...
