VYPR

Project-Management-Software

by pmTicket

CVEs (2)

  • CVE-2026-96751HigSep 24, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_project.php. Such manipulation of the argument conn_settings leads to sql injection. The attack may be…

  • CVE-2025-11135HigSep 29, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The affected element is the function loadLanguage of the file classes/class.database.php of the component Cookie Handler. Performing manipulation of the argument…