1000projects Portfolio Management System MCA vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting 1000projects Portfolio Management System MCA: 2 record(s), with affected versions and fixes.
CVE-2026-7144
Medium · 4.3
CWE-285 Apr 27, 2026
1000 Projects Portfolio Management System MCA update_passwd_process.php authorization
A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-7143
Medium · 6.3
CWE-74 Apr 27, 2026
1000 Projects Portfolio Management System MCA block_status.php sql injection
A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block_status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.