CVE-2020-37004

creationtimestamp| type| source ---|---|--- 2026-01-29 19:00:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlhvudvn42g...

CVE-2020-37004 Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage

The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to extract usernames and password hashes from the tblusers database table. Attackers can exploit the /frontend/getarticlesuggestion/ endpoint by crafting malicious search paramete...