Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: PROG MIS Clear all filters
TI-2026-12484 CVE-2026-14809 · GHSA-4r22-42g6-89f9

PROG MIS｜Prog Management System - SQL Injection

Priority MEDIUM 44

Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00563 Published 2026-07-06 No fix listed CWE-89
TI-2026-12483 CVE-2026-14808 · GHSA-g27h-3x9v-xxqq

PROG MIS｜Prog Management System - Exposure of Sensitive Information

Priority MEDIUM 49

Prog Management System developed by PROG MIS has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain the database account and password.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00689 Published 2026-07-06 No fix listed CWE-497
TI-2026-12482 CVE-2026-14807 · GHSA-8xw6-3xrm-fqhg

PROG MIS｜ERP App - Use of Hard-coded Credentials

Priority MEDIUM 49

ERP App developed by PROG MIS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to view application code and obtain the database account and password.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0063 Published 2026-07-06 No fix listed CWE-798