CVE-2026-7144: 1000 Projects Portfolio Management System MCA

Описание

Оригинално описание

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Засегнати продукти

• 1000 Projects Portfolio Management System MCA: 1.0

Вид слабост

• CWE-639 Authorization Bypass Through User-Controlled Key
• CWE-285 Неправилна авторизация

История

Други уязвимости в 1000 Projects Portfolio Management System MCA

• 6.3CVE-2026-7143
• 6.3CVE-2024-13003
• 7.3CVE-2024-12965
• 7.3CVE-2024-12961
• 7.3CVE-2024-12960

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-7144
• https://nvd.nist.gov/vuln/detail/CVE-2026-7144
• https://vuldb.com/vuln/359743
• https://vuldb.com/vuln/359743/cti
• https://vuldb.com/submit/801610
• https://github.com/9str0IL/CVE/issues/4
• https://1000projects.org/