PROG MIS vulnerabilities
Published CVEs affecting PROG MIS products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-14809
High · 7.5
CWE-89 Jul 6, 2026
PROG MIS|Prog Management System - SQL Injection
Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2026-14808
Critical · 9.8
CWE-497 Jul 6, 2026
PROG MIS|Prog Management System - Exposure of Sensitive Information
Prog
Management System developed by PROG MIS has a Exposure of Sensitive
Information vulnerability, allowing unauthenticated remote attackers to view
a specific page and obtain the database account and password.
CVE-2026-14807
Critical · 9.8
CWE-798 Jul 6, 2026
PROG MIS|ERP App - Use of Hard-coded Credentials
ERP App developed by PROG MIS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to view application code and obtain the database account and password.