Portfolio Management System Mca

CVE-2026-7144 Apr 27, 17:30 LOW POC Monitor

Authorization bypass in 1000 Projects Portfolio Management System MCA 1.0 allows authenticated remote attackers to modify other users' passwords via the `temp_user` parameter in `update_passwd_process.php`. The flaw is classified as CWE-639 (Authorization Bypass Through User-Controlled Key), enabling horizontal privilege escalation at the application layer. A publicly available proof-of-concept exploit exists on GitHub, though EPSS at 0.03% (7th percentile) and SSVC's 'not automatable' designation indicate limited mass-exploitation risk; no active exploitation has been confirmed by CISA KEV.

CVE-2026-7143 Apr 27, 17:15 LOW POC Monitor

SQL injection in 1000 Projects Portfolio Management System MCA up to version 1.0 allows authenticated remote attackers to access and potentially modify database contents via the q parameter in /admin/block_status.php. Publicly available exploit code exists, though no confirmed active exploitation is documented. The vulnerability poses minimal real-world risk due to EPSS score of 0.03% and requirement for prior authentication, with impact limited to low-level data disclosure and modification.

CVE-2024-13003 Dec 29, 04:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12965 Dec 26, 21:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12961 Dec 26, 18:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12960 Dec 26, 18:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12959 Dec 26, 16:15 MEDIUM POC This Month

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12958 Dec 26, 16:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12956 Dec 26, 15:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12954 Dec 26, 14:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12953 Dec 26, 14:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12951 Dec 26, 13:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-12942 Dec 26, 08:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-11819 Nov 27, 00:15 MEDIUM POC This Month

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-11744 Nov 26, 21:15 MEDIUM POC This Month

A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-11256 Nov 15, 20:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.