CVE-2026-96751: pmTicket Project-Management-Software add_project.php setSync sql injection
A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/addproject.php. Such manipulation of the argument connsettings leads to sql injection. The attack may be launched remotely. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability can be exploited remotely and requires no privileges or user interaction according to the supplied severity vector. Exploitation involves manipulating the conn_settings argument passed to setSync in /ajax/add_project.php.
Which deployments may be affected?
pmTicket Project-Management-Software is affected through commit 078fa56a782490c5059a0814f84df27984f4d7e2. Because the product uses a rolling release model, no affected or fixed release version numbers are available.
How can I assess whether my instance is exposed?
Review whether your deployment includes /ajax/add_project.php and whether its setSync function processes the conn_settings argument. Compare the deployed source with the affected commit where possible, since release-version-based identification is not available.
Is a vendor fix available?
The available information does not identify an updated release or patch. The vendor was contacted before disclosure but did not respond.