rootpwn

high · CVSS v3 7.3 · CVSS v4 6.9 · EPSS 0.00254

CVE-2026-96751

pmTicket Project-Management-Software is vulnerable to remote SQL injection via the setSync function in add_project.php. Attackers can manipu

Overview

pmTicket Project-Management-Software is vulnerable to remote SQL injection via the setSync function in add_project.php. Attackers can manipulate the conn_settings argument to execute arbitrary SQL, potentially exposing or altering sensitive data.

Description

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_project.php. Such manipulation of the argument conn_settings leads to sql injection. The attack may be launched remotely. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.

Impact

Confidentiality: attackers can read sensitive data from the database. Integrity: attackers can modify or delete records. Availability: database corruption could disrupt service. Defenders such as database administrators and application security teams are directly impacted.

Remediation

Apply the vendor patch as soon as it becomes available. Until then, restrict access to /ajax/add_project.php to trusted IP addresses, enforce strict input validation on conn_settings, use parameterized queries, and monitor database logs for suspicious activity.

Risk context

The vulnerability has a high severity score (CVSS 7.3) but a low EPSS of 0.00254, indicating a low likelihood of exploitation but significant potential impact if exploited. Defenders should prioritize patching or mitigations promptly.

Affected products

  • pmTicket Project-Management-Software

Scores

Severity
high
CVSS v2
7.5
CVSS v3
7.3
CVSS v4
6.9
EPSS
0.00254

sql-injection remote web-application pmTicket high-severity database input-validation

← All CVEs

Related CVEs

high

CVE-2026-96762

kvcache-ai mooncake up to 0.3.12/0.3.13.post1 has an authorization bypass in the UnmountSegment RPC Path Handler. Attackers can manipulate client_id/segment_id to gain unauthorized access. Remote exploitation is possible.

View analysis

high

CVE-2026-96803

CVE-2026-96803 is a high‑severity SQL injection flaw in the java110 MicroCommunity 2.0 application, specifically the QueryServiceSMOImpl.fallBack method in BusinessApi.java. The vulnerability allows remote attackers to inject arbitrary SQL via the fallBackSql parameter, potentially exposing or manipulating database contents. The issue remains unpatched and publicly exploitable.

View analysis

high

CVE-2026-96884

A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-96898

A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument path_type results in path traversal. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis