Vulnerabilities > Pmtool

DATE CVE VULNERABILITY TITLE RISK
2006-04-20 CVE-2006-1920 SQL Injection vulnerability in Pmtool 1.2.2
SQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute arbitrary SQL commands via the order parameter in the include files (1) user.inc.php, (2) customer.inc.php, and (3) project.inc.php.
network
low complexity
pmtool
6.4