Skip to content
OpenAdvisories

Vendor

pmTicket

3 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.3

    pmTicket Project-Management-Software add_project.php setSync sql injection

    A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_project.php. Such manipulation of the argument conn_settings leads to sql injection.…

  • High 7.3

    pmTicket Project-Management-Software Cookie class.database.php loadLanguage deserialization

    A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The affected element is the function loadLanguage of the file classes/class.database.php of the component Cookie Handler. Performing manipulat…

  • High 7.3

    pmTicket Project-Management-Software class.database.php getUserLanguage sql injection

    A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argu…