Approved changes feed: RSS · Atom

cpe:2.3:a:1000_projects:portfolio_management_system_mca:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor1000 Projects (bc9d973b-ec91-5ff9-82b2-6f4b94790a80)
ProductPortfolio Management System Mca (3567c094-d864-54b9-8c99-e5f9da0300a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7144 vulnerable 2026-06-08 08:07:05.435299 1000 Projects Portfolio Management System MCA update_passwd_process.php authorization
MEDIUM (4.3)
A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-27T17:30:15.437Z
Updated: 2026-04-27T17:58:02.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7143 vulnerable 2026-06-08 08:07:05.434694 1000 Projects Portfolio Management System MCA block_status.php sql injection
MEDIUM (6.3)
A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block_status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Published: 2026-04-27T17:15:10.526Z
Updated: 2026-04-27T17:59:01.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13003 vulnerable 2026-06-08 06:25:36.493141 1000 Projects Portfolio Management System MCA update_ed.php sql injection
MEDIUM (6.3)
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /update_ed.php. The manipulation of the argument e_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-29T04:00:13.408Z
Updated: 2024-12-31T17:10:30.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12965 vulnerable 2026-06-08 06:25:36.411942 1000 Projects Portfolio Management System MCA update_ex_detail.php sql injection
HIGH (7.3)
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /update_ex_detail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T20:31:04.438Z
Updated: 2024-12-27T16:48:25.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12961 vulnerable 2026-06-08 06:25:36.404360 1000 Projects Portfolio Management System MCA update_ach_details.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /update_ach_details.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T18:00:14.407Z
Updated: 2024-12-26T18:39:08.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12960 vulnerable 2026-06-08 06:25:36.403730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12959 vulnerable 2026-06-08 06:25:36.403063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12958 vulnerable 2026-06-08 06:25:36.402463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12956 vulnerable 2026-06-08 06:25:36.400005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12954 vulnerable 2026-06-08 06:25:36.396050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12953 vulnerable 2026-06-08 06:25:36.395339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12951 vulnerable 2026-06-08 06:25:36.392529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12942 vulnerable 2026-06-08 06:25:36.376600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11819 vulnerable 2026-06-08 06:23:50.448670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11744 vulnerable 2026-06-08 06:23:50.330558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11256 vulnerable 2026-06-08 06:23:49.235894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.