Lucene search
+L

195 matches found

CNNVD
CNNVD
added 2023/09/29 12:00 a.m.13 views

SourceCodester Task Management System Cross-Site Scripting Vulnerability

SourceCodester Task Management System is a task management system. A cross-site scripting vulnerability exists in SourceCodester Task Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code via the parameter field in index.php?page=projectlist...

5.4CVSS7AI score0.00426EPSS
SaveExploits1References2
CVE
CVE
added 2023/09/29 12:00 a.m.67 views

CVE-2023-43944

CVE-2023-43944 describes a stored Cross-Site Scripting (XSS) vulnerability in SourceCodester Task Management System 1.0. The issue is triggered via the input in the parameter field of the endpoint index.php?page=project_list. Affected component is the web application’s project list handling; root...

5.4CVSS5.4AI score0.00426EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/09/29 12:00 a.m.42 views

CVE-2023-43944

A Stored Cross Site Scripting XSS vulnerability was found in SourceCodester Task Management System 1.0. It allows attackers to execute arbitrary code via parameter field in index.php?page=projectlist...

5.6AI score0.00426EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/09/29 12:00 a.m.15 views

CVE-2023-43944

A Stored Cross Site Scripting XSS vulnerability was found in SourceCodester Task Management System 1.0. It allows attackers to execute arbitrary code via parameter field in index.php?page=projectlist...

6.2AI score0.00426EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/09/29 12:00 a.m.20 views

PT-2023-29044

Name of the Vulnerable Software and Affected Versions SourceCodester Task Management System version 1.0 Description A Stored Cross Site Scripting XSS issue was found in the software. It allows attackers to execute arbitrary code via a parameter field in the "index.php?page=project list" API...

5.4CVSS6.3AI score0.00426EPSS
SaveExploits1References6
Exploit DB
Exploit DB
added 2023/04/06 12:00 a.m.321 views

Employee Task Management System v1.0 - SQL Injection on edit-task.php

Exploit Title: Employee Task Management System v1.0 - SQL Injection on edit-task.php Exploit Author: Muhammad Navaid Zafar Ansari Date: 17 February 2023 CVE Assigned: CVE-2023-0902 mitre.org, nvd.nist.org Author: Muhammad Navaid Zafar Ansari Vendor Homepage: https://www.sourcecodester.com Softwar...

8.8CVSS5.5AI score0.02693EPSS
SaveExploits10
zdt
zdt
added 2023/02/27 12:00 a.m.372 views

Employee Task Management System 1.0 SQL Injection Vulnerability

Employee Task Management System - SQL Injection on task-details.php?taskid=? with low privilege authentication CVE Assigned: CVE-2023-0904 mitre.org, nvd.nist.org Author Email: email protected Vendor Homepage: https://www.sourcecodester.com Software Link: Employee Task Management System Version: ...

8.8CVSS7.2AI score0.02693EPSS
SaveExploits13
Packet Storm
Packet Storm
added 2023/02/24 12:00 a.m.251 views

Employee Task Management System 1.0 SQL Injection

Employee Task Management System - SQL Injection on task-details.php?taskid=? with low privilege authentication Date: 17 February 2023 CVE Assigned: CVE-2023-0904 mitre.org, nvd.nist.org Author Email: [email protected] Vendor Homepage: https://www.sourcecodester.com Software Link: Employe...

0.2AI score0.02693EPSS
SaveExploits13
NVD
NVD
added 2023/02/18 8:15 a.m.47 views

CVE-2023-0905

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS7.4AI score0.03189EPSS
SaveExploits5References3
NVD
NVD
added 2023/02/18 8:15 a.m.36 views

CVE-2023-0904

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

8.8CVSS7.2AI score0.01684EPSS
SaveExploits5References3
Prion
Prion
added 2023/02/18 8:15 a.m.23 views

Authentication flaw

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS7.6AI score0.03189EPSS
SaveExploits5References3Affected Software1
Prion
Prion
added 2023/02/18 8:15 a.m.25 views

Sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

6.5CVSS9AI score0.01684EPSS
SaveExploits5References3Affected Software1
CVE
CVE
added 2023/02/18 7:39 a.m.106 views

CVE-2023-0905

CVE-2023-0905 affects SourceCodester Employee Task Management System v1.0, specifically the file changePasswordForEmployee.php, where improper authentication is triggered by an unknown function. The vulnerability can be exploited remotely and has been disclosed publicly; an exploit is tracked in ...

7.5CVSS7.4AI score0.03189EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
added 2023/02/18 7:39 a.m.53 views

CVE-2023-0905 SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS7.9AI score0.03189EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2023/02/18 7:37 a.m.45 views

CVE-2023-0904 SourceCodester Employee Task Management System task-details.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

6.5CVSS9.2AI score0.01684EPSS
SaveExploits5References3
CVE
CVE
added 2023/02/18 7:37 a.m.59 views

CVE-2023-0904

CVE-2023-0904 affects SourceCodester Employee Task Management System v1.0. A SQL injection flaw exists in task-details.php arising from manipulation of the task_id parameter, enabling remote exploitation. Public exploit references (e.g., Exploit-DB) corroborate a remote attack vector. The vulnera...

8.8CVSS7.7AI score0.01684EPSS
SaveExploits5References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/18 7:35 a.m.9 views

CVE-2023-0903 SourceCodester Employee Task Management System edit-task.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the argument taskid leads to sql injection. The attack can be initiated remotely. The complexit...

5CVSS7.3AI score0.0073EPSS
SaveExploits5References3
CVE
CVE
added 2023/02/18 7:35 a.m.67 views

CVE-2023-0903

The CVE-2023-0903 entry concerns SourceCodester Employee Task Management System v1.0. The vulnerability resides in edit-task.php where manipulating the task_id parameter enables SQL injection, giving remote attackers the ability to affect the database. The issue has been characterized as high-sev...

8.8CVSS7.1AI score0.0073EPSS
SaveExploits5References3Affected Software1
CNNVD
CNNVD
added 2023/02/18 12:00 a.m.13 views

Employee Task Management System 授权问题漏洞

Employee Task Management System is an employee task management system by Carlo Montero Personal Developer. An authorization issue vulnerability exists in Employee Task Management System version 1.0, which stems from incorrect authentication...

7.5CVSS7.2AI score0.03189EPSS
SaveExploits5References5
CNNVD
CNNVD
added 2023/02/18 12:00 a.m.13 views

Employee Task Management System SQL注入漏洞

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the taskid parameter that can lead to sql injection...

8.8CVSS7AI score0.01684EPSS
SaveExploits5References5
Rows per page
Query Builder