Description
1000 Projects Portfolio Management System MCA是1000 Projects开源的一个组合管理系统。 1000 Projects Portfolio Management System MCA 1.0版本存在注入漏洞，该漏洞源于/update_ed.php文件的e_id参数包含一个SQL注入漏洞。
1000 Projects Portfolio Management System MCA 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2024-12965
https://www.knowsafe.com/ti/info/0/992138
https://vuldb.com/zh/vuln/359742
https://www.sentinelone.com/vulnerability-database/cve-2024-12965/
https://www.cve.org/CVERecord?id=CVE-2024-12942
https://github.com/xingrenlvke/cve/issues/5
https://cert.kenet.or.ke/cve-2024-12954-1000-projects-portfolio-management-system-mca-unrestricted-file-upload-vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2026-7143
https://www.tenable.com/cve/CVE-2024-11744
https://radar.offseq.com/threat/cve-2026-7143-sql-injection-in-1000-projects-portf-39937c5d
https://app.opencve.io/cve/?page=4&vendor=1000projects