CVE-2026-7144

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file updatepasswdprocess.php. The manipulation of the argument tempuser results in authorization bypass. The attack can be launched remotely. The exploit has been...

CVE-2026-7144

The CVE-2026-7144 entry concerns the 1000 Projects Portfolio Management System MCA 1.0. The vulnerability affects the file update_passwd_process.php, where manipulating the argument temp_user yields an authorization bypass. The vulnerability can be exploited remotely and, per the sources, the exp...

1000 Projects Portfolio Management System MCA 授权问题漏洞

The 1000 Projects Portfolio Management System MCA is an open-source combination management system developed by 1000 Projects. Version 1.0 of the 1000 Projects Portfolio Management System MCA has a vulnerability related to authorization. This vulnerability stems from improper handling of the...