Allan Njuguna

**Name of the Vulnerable Software and Affected Versions** pmTicket Project-Management-Software versions prior to 2ef379da2075f4761a2c9029cf91d073474e7486 **Description** A flaw exists in pmTicket Project-Management-Software related to the deserialization of data. The issue is located in the `loadLanguage` function within the `classes/class.database.php` file, part of the Cookie Handler component. Manipulation of the `user id` argument can trigger this deserialization. The attack can be performed remotely. The exploit is publicly available. The software uses continuous delivery with rolling releases, and the vendor did not respond to early disclosure attempts. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** pmTicket Project-Management-Software versions prior to 2ef379da2075f4761a2c9029cf91d073474e7486 **Description** A critical issue exists in pmTicket Project-Management-Software. The `getUserLanguage` function within the `classes/class.database.php` file is susceptible to SQL injection due to manipulation of the `user id` argument. This allows for remote exploitation. The vendor was contacted regarding this disclosure but did not respond. **Recommendations** Versions prior to 2ef379da2075f4761a2c9029cf91d073474e7486: Restrict or disable the use of the `getUserLanguage` function until a suitable update is available.

**Name of the Vulnerable Software and Affected Versions** Tecno 4G Portable WiFi TR118 version V008-20220830 **Description** A critical issue affects an unknown functionality of the file /goform/goform get cmd process of the component SMS Check. The manipulation of the `order by` argument leads to SQL injection. This issue can be exploited remotely. The vendor was contacted about this disclosure but did not respond. **Recommendations** As a temporary workaround, consider restricting access to the `/goform/goform get cmd process` endpoint until a patch is available. Avoid using the `order by` argument in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tecno 4G Portable WiFi TR118 version TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830 **Description** A critical issue has been identified, affecting the Ping Tool component, specifically the /goform/goform get cmd process file. The `url` argument is vulnerable to os command injection, which can be exploited remotely. The issue has been publicly disclosed. **Recommendations** For version TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830, as a temporary workaround, consider restricting access to the Ping Tool component, specifically the /goform/goform get cmd process file, to minimize the risk of exploitation. Avoid using the `url` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.