A SQL injection vulnerability in MyT Project Management 1.5.1 allows authenticated attackers to extract sensitive database information or manipulate application data.

This is a SQL injection vulnerability (CWE-89) located in the Charge[group_total] parameter of the /charge/admin endpoint. An authenticated attacker can submit malicious POST requests to execute error-based, time-based blind, or stacked SQL queries.

Successful exploitation of this vulnerability poses a significant risk to the integrity and confidentiality of the project management system. By injecting malicious SQL commands, an attacker can bypass standard database queries to access unauthorized sensitive information, modify existing records, or potentially cause a denial of service. With a CVSS score of 7.1, this vulnerability is classified as High, indicating that it represents a substantial security risk that requires prioritized attention to prevent data compromise.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the /charge/admin endpoint to highly trusted users only and implement strict input validation for the Charge[group_total] parameter.

Proactive Monitoring: Security teams should review application access logs for suspicious POST requests containing SQL keywords or unusual character sequences, particularly those targeting the /charge/admin URI.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the specified parameter.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the ExploitDB entry 46084.

Given the availability of public proof-of-concept code and the high potential for data exfiltration, this vulnerability poses a clear threat to organizational security. Administrators must treat this as a high priority issue by implementing compensating controls immediately, as an official patch is not identified. Continuous monitoring of the affected endpoint is essential until the vendor provides a formal resolution.