CVE-2024-12959 : faille critique 1000projects portfolio management… (CVSS 9.8)

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /update_personal_details.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

26 déc. 2024

Dernière mise à jour

17 juin 2026

• 1000projects portfolio management system mca

• Fiche CVE-2024-12959 sur le NVD (NIST)
• 1000projects.org/
• github.com/dawatermelon/CVE/blob/main/Portfolio%20Managem…
• vuldb.com/
• vuldb.com/
• vuldb.com/