CVE Feed

    Dashboard / CVE / CVE-2024-12951

    CVE-2024-12951

    A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /add_personal_details.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

    Published:Dec 26, 2024
    Last Modified:Apr 22, 2025
    EPS:Dec 26, 2024
    EPSS Score:0.00053
    CVSS Score:6.3

    Affected Products

    Vendor
    1000projects
    Product
    Portfolio Management System Mca

    Exploits

    https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README3.mdhttps://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README3.md

    Related CVEs

    CVE-2026-7144 (CVSS 2.1) — A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unkn…
    CVE-2026-7143 (CVSS 2.1) — A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unk…
    CVE-2024-13003 (CVSS 5.3) — A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical.…
    CVE-2024-12965 (CVSS 6.9) — A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critic…
    CVE-2024-12961 (CVSS 6.9) — A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA …
    CVE-2024-12960 (CVSS 6.9) — A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System…
    CVE-2024-12958 (CVSS 6.9) — A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Th…
    CVE-2024-12956 (CVSS 5.3) — A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Thi…
    CVE-2024-12954 (CVSS 5.3) — A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA …
    CVE-2024-12953 (CVSS 5.3) — A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High