CVE-2023-27113

The pearProjectApi version v2.8.10 is vulnerable to a SQL injection (CWE-89) vulnerability. The flaw exists within the organizationCode parameter at the project.php endpoint, allowing for unauthorized database interaction. This is a project management system backend interface for individual devel...

CVE-2023-27112

pearProjectApi version v2.8.10 is vulnerable to a SQL injection vulnerability (CWE-89). The flaw exists because the projectCode parameter at the project.php endpoint is not properly neutralized. Attackers could exploit this to interact with the backend database. As a temporary workaround, users s...

CVE-2026-3057

CVE-2026-3057 affects the a54552239 pearProjectApi, specifically the Backend Interface component. The vulnerability resides in the function dateTotalForProject in application/common/Model/Task.php, where manipulating the projectCode argument leads to a SQL injection. The issue can be exploited re...