Lucene search

K
cve[email protected]CVE-2024-25220
HistoryFeb 14, 2024 - 3:15 p.m.

CVE-2024-25220

2024-02-1415:15:09
CWE-89
web.nvd.nist.gov
43
cve-2024-25220
task manager app
v1.0
sql injection
vulnerability
taskid parameter
edittask.php
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

43.5%

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php.

Affected configurations

NVD
Node
task_manager_in_php_with_source_code_projecttask_manager_in_php_with_source_codeMatch1.0

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

43.5%

Related for CVE-2024-25220