Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block_status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-27 | 1 | Disclosure1 |
| 2026-04-28 | 1 | General1 |
CVE-2026-7143 SQL Injection in 1000 Projects Portfolio Management System MCA Up To 1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7143
Post summary
CVE-2026-7143 is a reported SQL Injection flaw affecting the 1000 Projects Portfolio Management System MCA Up to version 1.0, with details listed on VulMon, but no additional information about exploitation, patches, or PoC exists in the provided text.
CVE-2026-7143 A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block_status.php. The man… https://www.cve.org/CVERecord?id=CVE-2026-7143
Post summary
The post announces CVE-2026-7143 affecting the 1000 Projects Portfolio Management System MCA, noting an unknown function in /admin/block_status.php, but provides no further technical details, PoC, or remedy.