PT-2026-32175 · Myt · Php Project Management+1

CVE-2019-25713 · Publicado 2026-04-12 · Atualizado 2026-04-12

NVD

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charge[group total] parameter. Attackers can submit crafted POST requests to the /charge/admin endpoint with error-based, time-based blind, or stacked query payloads to extract sensitive database information or manipulate data.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-25713

Produtos afetados

Php Project Management

Myt

Referências · 5

• 🔥 https://exploit-db.com/exploits/46084 · Exploit
• https://vulncheck.com/advisories/myt-pm-sql-injection-via-charge-group-total-parameter · Nota
• https://sourceforge.net/projects/myt · Nota
• https://manageyourteam.net · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25713 · Nota de Segurança