Approved changes feed: RSS · Atom

cpe:2.3:a:myt:project_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMyt (9a15fd35-9e48-5237-ba58-d845eeb63885)
ProductProject Management (fbad37a3-98cd-5039-9025-123728f21f27)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25713 vulnerable 2026-06-08 05:13:42.829384 MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter
HIGH (7.1)
MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charge[group_total] parameter. Attackers can submit crafted POST requests to the /charge/admin endpoint with error-based, time-based blind, or stacked query payloads to extract sensitive database information or manipulate data.
Published: 2026-04-12T12:28:57.031Z
Updated: 2026-07-28T01:47:00.430Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.