Lucene search
+L

101 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/14 12:00 a.m.•1 views

CVE-2024-7793: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.4CVSS3.6AI score0.00447EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/14 12:00 a.m.•1 views

CVE-2024-7792: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoint/delete-task.php. The manipulation of the argument task leads to sql injection. It is possible to launch the attack remotely. The exploit...

8.8CVSS6.4AI score0.00573EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/14 3:14 p.m.•17 views

CVE-2024-28277

In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...

6.1CVSS5.9AI score0.00362EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/05/09 12:00 a.m.•18 views

PT-2024-22375 · Unknown · Sourcecodester School Task Manager

Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager version 1.0 Description: The issue is related to Cross Site Scripting XSS via the add-task.php endpoint, specifically the task name parameter. This allows for potential malicious script injection. No...

6.1CVSS5.9AI score0.00286EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/05/09 12:00 a.m.•20 views

PT-2024-22376 · Unknown · Sourcecodester School Task Manager

Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager version 1.0 Description: A vulnerability was identified within the subject name= parameter, enabling Stored Cross-Site Scripting XSS attacks. This issue allows attackers to manipulate the subject's name,...

6.1CVSS5.8AI score0.00362EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•13 views

SourceCodester Task Management System 安全漏洞

SourceCodester Task Management System is a task management system. A security vulnerability exists in SourceCodester Task Management System v1.0 that could allow a remote attacker to execute arbitrary code, elevate privileges, and obtain sensitive information via admin-manage-user.php with a...

9.8CVSS7.1AI score0.01233EPSS
SaveExploits1References3
OSV
OSV
•added 2024/04/03 2:15 a.m.•17 views

CVE-2024-3225

A vulnerability was found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit-task.php. The manipulation of the argument taskid leads to sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS5.8AI score0.0057EPSS
SaveExploits1References4
OSV
OSV
•added 2024/04/03 12:15 a.m.•17 views

CVE-2024-3222

A vulnerability, which was classified as critical, has been found in SourceCodester PHP Task Management System 1.0. This issue affects some unknown processing of the file admin-password-change.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

8.8CVSS5.7AI score0.00666EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/03 12:00 a.m.•17 views

SourceCodester Task Management System SQL注入漏洞

SourceCodester Task Management System is a task management system. A SQL injection vulnerability exists in SourceCodester Task Management System version 1.0, which originates from a SQL injection vulnerability in the parameter adminid in the admin-manage-user.php file...

8.8CVSS7AI score0.00666EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/03/25 12:00 a.m.•14 views

CVE-2024-29302

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...

8.2AI score0.00788EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2024/03/25 12:00 a.m.•14 views

PT-2024-22853 · Sourcecodester · Sourcecodester Php Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP Task Management System version 1.0 Description: The issue is related to SQL Injection via the update-employee.php file. This allows for potential exploitation. No information is provided about the estimated number of...

7.5CVSS8.2AI score0.00788EPSS
SaveExploits2References7
OSV
OSV
•added 2024/03/18 2:15 a.m.•12 views

CVE-2024-2576

A vulnerability, which was classified as critical, was found in SourceCodester Employee Task Management System 1.0. This affects an unknown part of the file /update-admin.php. The manipulation of the argument adminid leads to authorization bypass. It is possible to initiate the attack remotely. T...

9.8CVSS5.4AI score0.00669EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/17 12:00 a.m.•19 views

PT-2024-21116 · Sourcecodester · Sourcecodester Employee Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Employee Task Management System. The issue affects an unknown function of the file /task-info.php, leading t...

9.8CVSS7.4AI score0.0103EPSS
SaveExploits0References7
Prion
Prion
•added 2024/01/29 8:15 p.m.•27 views

Sql injection

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...

7.5CVSS8.6AI score0.01101EPSS
SaveExploits3References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•22 views

PT-2024-20293 · Unknown · Sourcecodester School Task Manager

Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager App version 1.0 Description: The issue allows SQL Injection via the task parameter. This could potentially be exploited to extract or modify sensitive data. There is no information provided about the estimat...

9.8CVSS6.4AI score0.01101EPSS
SaveExploits3References5
NVD
NVD
•added 2023/10/28 10:15 p.m.•43 views

CVE-2023-5836

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS7.3AI score0.00418EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/10/28 9:00 p.m.•11 views

CVE-2023-5836 SourceCodester Task Reminder System sql injection

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7.4AI score0.00418EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/28 12:00 a.m.•4 views

CVE-2023-5836: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS6.6AI score0.00418EPSS
SaveExploits0References2
OSV
OSV
•added 2023/10/27 2:15 a.m.•17 views

CVE-2023-5813

A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deletereminder. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

8.8CVSS5.8AI score0.00444EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/27 2:15 a.m.•39 views

CVE-2023-5814

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=savereminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS7.3AI score0.00444EPSS
SaveExploits0References2
Rows per page
Query Builder