pmTicket vulnerabilities
We track 3 vulnerabilities in pmTicket products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
Latest pmTicket vulnerabilities
- 7.3 High severity
Project-Management-Software: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_project.php. Such manipulation of the argument conn_settings leads to sql injection.
- 7.3 High severity
A vulnerability was detected in pmTicket Project-Management-Software up to…
A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The affected element is the function loadLanguage of the file classes/class.database.php of the component Cookie Handler. Performing manipulati
- 7.3 High severity
Project-Management-Software: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argum