Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Whyubullymexcc

#13661of 53,625
19.6Total CVSS
Vulnerabilities · 2
Critical
2
PT-2025-1384
9.8
2025-01-21
Unknown · Pearprojectapi · CVE-2023-27112
**Name of the Vulnerable Software and Affected Versions** pearProjectApi version 2.8.10 **Description** The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `projectCode` parameter at the "project.php" endpoint. **Recommendations** For pearProjectApi version 2.8.10, consider restricting access to the `projectCode` parameter in the "project.php" endpoint until a patch is available. As a temporary workaround, avoid using the `projectCode` parameter in the affected endpoint to minimize the risk of exploitation.
PT-2025-1385
9.8
2025-01-21
Unknown · Pearprojectapi · CVE-2023-27113
**Name of the Vulnerable Software and Affected Versions** pearProjectApi version 2.8.10 **Description** The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `organizationCode` parameter at the "project.php" endpoint. **Recommendations** For pearProjectApi version 2.8.10, consider restricting access to the `organizationCode` parameter in the project.php endpoint until a patch is available. As a temporary workaround, avoid using the `organizationCode` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.