Vulnerabilities > Pmtool
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2006-04-20 | CVE-2006-1920 | SQL Injection vulnerability in Pmtool 1.2.2 SQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute arbitrary SQL commands via the order parameter in the include files (1) user.inc.php, (2) customer.inc.php, and (3) project.inc.php. | 6.4 |