Lucene search

K
cve[email protected]CVE-2024-25222
HistoryFeb 14, 2024 - 3:15 p.m.

CVE-2024-25222

2024-02-1415:15:09
CWE-89
web.nvd.nist.gov
44
cve-2024-25222
task manager app
sql injection
projectid parameter
vulnerability
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

43.5%

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php.

Affected configurations

NVD
Node
task_manager_in_php_with_source_code_projecttask_manager_in_php_with_source_codeMatch1.0

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

43.5%

Related for CVE-2024-25222