Vulnerabilities

TI-2026-02641 CVE-2026-3057 · GHSA-xqg5-5x64-93r9

a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection

MEDIUM 57

A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00586 Published 2026-02-24 No fix listed CWE-74

TI-2023-11930 CVE-2023-27113 · GHSA-r83r-pgp4-qf32

HIGH 82

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00531 Published 2025-01-21 No fix listed CWE-89

TI-2023-11929 CVE-2023-27112 · GHSA-8pwg-vv3j-w8c7

HIGH 82

pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00531 Published 2025-01-21 No fix listed CWE-89