a54552239 pearprojectapi vulnerabilities

Latest a54552239 pearprojectapi CVEs

Newest publication first

1. CVE-2026-3057 a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection

   Published 2026-02-24

   Medium·CVSS 5.3 EPSS 0.59%

   A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The...

2. CVE-2023-27112 pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php.

   Published 2025-01-21

   Critical·CVSS 9.8 EPSS 0.53%

   pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php.

3. CVE-2023-27113 pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php.

   Published 2025-01-21

   Critical·CVSS 9.8 EPSS 0.53%

   pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.