Cpe:2.3:a:pmticket:project_management_software:*:*:*:*:*:*:*:*

An unauthenticated remote SQL injection vulnerability in pmTicket Project-Management-Software allows attackers to execute arbitrary SQL commands via the 'conn_settings' parameter in /ajax/add_project.php.