This page aggregates publicly disclosed CVE and security risk information related to myt_project, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2019-25713 | MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charge[group_total] parameter. Attackers can submit crafted POST requests to the /charge/admin endpoint with error-based, time-based blind, or stacked query payloads to extract sensitive database information or manipulate data. | [email protected] | 7.1 | 0.28% | 2026-04-12 | 2026-04-17 |
| CVE-2019-13346 | In MyT 1.5.1, the User[username] parameter has XSS. | [email protected] | 6.1 | 2.19% | 2019-07-17 | 2024-11-21 |