Threats tagged 'ghsa-r7m3-w28j-vwx2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.3%	CVE-2026-96751pmTicket Project-Management-Software · Injection Medium6.9EPSS 0.3%2026-09-24GCVE DatabaseCVE-2026-96751 A SQL injection vulnerability exists in the pmTicket Project-Management-Software affecting the setSync function in /ajax/add_project.php. The flaw allows remote attackers to manipulate the conn_settings argument to execute SQL injection attacks. The software uses a rolling release model, so no specific version numbers are provided. The vendor has not responded to disclosure attempts. The vulnerability has a CVSS score of 7.3, indicating a medium severity level. EPSS 0.3%Report on CVE-2026-96751 Vulnerability CWE-74 #ghsa-r7m3-w28j-vwx2	GCVE Database	2026-09-24

Page 1 of 1