Skip to content
OpenAdvisories

Vendor

ProjeQtor

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-41462 Public exploit

    ProjeQtor < 12.4.4 Unauthenticated SQL Injection via Login

    ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without parameterization or sanitization. Attackers can inject arbitrary…

  • Critical 9.8

    ProjeQtOr Project Management 9.1.4 - Remote Code Execution

    ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute syst…