https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3057.htmlhttps://patchthecve.com/cve/CVE-2026-3057.htmlWed, 17 Jun 2026 10:42:58 +0000MEDIUM 6.3: A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be launchhttps://patchthecve.com/cve/CVE-2023-27113.htmlhttps://patchthecve.com/cve/CVE-2023-27113.htmlWed, 17 Jun 2026 05:44:24 +0000CRITICAL 9.8: pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php.https://patchthecve.com/cve/CVE-2023-27112.htmlhttps://patchthecve.com/cve/CVE-2023-27112.htmlWed, 17 Jun 2026 05:44:23 +0000CRITICAL 9.8: pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php.