CVE-2006-1920

no score yetEPSS 2.0%

SQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute arbitrary SQL commands via the order parameter in the include files (1) user.inc.php, (2) customer.inc.php, and (3) project.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
Published: 2006-04-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

pmtool:pmtool

References

http://secunia.com/advisories/19685
http://www.osvdb.org/24780
http://www.osvdb.org/24781
http://www.osvdb.org/24782
http://www.securityfocus.com/bid/17599

Check your stack JSON