https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13003.htmlhttps://patchthecve.com/cve/CVE-2024-13003.htmlWed, 17 Jun 2026 07:00:57 +0000MEDIUM 6.3: A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /update_ed.php. The manipulation of the argument e_id leads to sql injection. The attack may be launched remotely. The explohttps://patchthecve.com/cve/CVE-2024-12965.htmlhttps://patchthecve.com/cve/CVE-2024-12965.htmlWed, 17 Jun 2026 07:00:52 +0000HIGH 7.3: A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /update_ex_detail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit hahttps://patchthecve.com/cve/CVE-2024-12961.htmlhttps://patchthecve.com/cve/CVE-2024-12961.htmlWed, 17 Jun 2026 07:00:51 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /update_ach_details.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2024-12960.htmlhttps://patchthecve.com/cve/CVE-2024-12960.htmlWed, 17 Jun 2026 07:00:51 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. This issue affects some unknown processing of the file /update_edu_details.php. The manipulation of the argument q leads to sql injection. The attack may be initiated remotely. Thehttps://patchthecve.com/cve/CVE-2024-12959.htmlhttps://patchthecve.com/cve/CVE-2024-12959.htmlWed, 17 Jun 2026 07:00:51 +0000HIGH 7.3: A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /update_personal_details.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has behttps://patchthecve.com/cve/CVE-2024-12958.htmlhttps://patchthecve.com/cve/CVE-2024-12958.htmlWed, 17 Jun 2026 07:00:51 +0000HIGH 7.3: A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_pro_details.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2024-12956.htmlhttps://patchthecve.com/cve/CVE-2024-12956.htmlWed, 17 Jun 2026 07:00:50 +0000MEDIUM 6.3: A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /add_achievement_details.php. The manipulation of the argument ach_certy leads to unrestricted upload. The attack may be initiated remotelhttps://patchthecve.com/cve/CVE-2024-12954.htmlhttps://patchthecve.com/cve/CVE-2024-12954.htmlWed, 17 Jun 2026 07:00:50 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_ach.php. The manipulation of the argument ach_certy leads to unrestricted upload. It is possible to initiate the attack remotely. The exhttps://patchthecve.com/cve/CVE-2024-12953.htmlhttps://patchthecve.com/cve/CVE-2024-12953.htmlWed, 17 Jun 2026 07:00:50 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown functionality of the file /update_pd_process.php. The manipulation of the argument profile leads to unrestricted upload. The attack may be lahttps://patchthecve.com/cve/CVE-2024-12951.htmlhttps://patchthecve.com/cve/CVE-2024-12951.htmlWed, 17 Jun 2026 07:00:50 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /add_personal_details.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The https://patchthecve.com/cve/CVE-2024-12942.htmlhttps://patchthecve.com/cve/CVE-2024-12942.htmlWed, 17 Jun 2026 07:00:48 +0000HIGH 7.3: A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/admin_login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remothttps://patchthecve.com/cve/CVE-2024-11819.htmlhttps://patchthecve.com/cve/CVE-2024-11819.htmlWed, 17 Jun 2026 06:58:30 +0000HIGH 7.3: A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploithttps://patchthecve.com/cve/CVE-2024-11744.htmlhttps://patchthecve.com/cve/CVE-2024-11744.htmlWed, 17 Jun 2026 06:58:22 +0000HIGH 7.3: A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. Thehttps://patchthecve.com/cve/CVE-2024-11256.htmlhttps://patchthecve.com/cve/CVE-2024-11256.htmlWed, 17 Jun 2026 06:57:24 +0000HIGH 7.3: A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been d