CVE-2024-13003: 1000 Projects Portfolio Management System MCA

Описание

Оригинално описание

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /update_ed.php. The manipulation of the argument e_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Засегнати продукти

• 1000 Projects Portfolio Management System MCA: 1.0

Вид слабост

• CWE-89 SQL инжекция
• CWE-74 Неправилна неутрализация на специални елементи в изходни данни

История

Други уязвимости в 1000 Projects Portfolio Management System MCA

• 5.3CVE-2026-7144
• 6.3CVE-2026-7143
• 7.3CVE-2024-12965
• 7.3CVE-2024-12961
• 7.3CVE-2024-12960

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-13003
• https://nvd.nist.gov/vuln/detail/CVE-2024-13003
• https://vuldb.com/?id.289664
• https://vuldb.com/?ctiid.289664
• https://vuldb.com/?submit.469452
• https://github.com/naotuo/CVE/blob/main/SQL_Injection_in_Portfolio_Management_System.md
• https://1000projects.org/