CVE-2024-12961 | 1000 Projects Portfolio Management System MCA 1.0 /update_ach_details.php q sql injection

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /update_ach_details.php. The manipulation of the argument q leads to sql injection.

This vulnerability is traded as CVE-2024-12961. It is possible to launch the attack remotely. Furthermore, there is an exploit available.