Lucene search
+L

571 matches found

Cvelist
Cvelist
•added 2024/04/24 12:00 a.m.•40 views

CVE-2024-28613

SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php, and edit-task.php component...

7.9AI score0.0063EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/24 12:00 a.m.•21 views

CVE-2024-28613

SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php, and edit-task.php component...

5.9AI score0.0063EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/24 12:00 a.m.•9 views

CVE-2024-28613: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php, and edit-task.php component...

9.8CVSS6AI score0.0063EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/24 12:00 a.m.•7 views

PT-2024-22494

Name of the Vulnerable Software and Affected Versions PHP Task Management System version 1.0 Description The issue allows a remote attacker to escalate privileges and obtain sensitive information. This is achieved via the task id parameter of the "task-details.php" and "edit-task.php" components...

9.8CVSS6AI score0.0063EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/04/24 12:00 a.m.•17 views

PHP Task Management System SQL Injection Vulnerability

SourceCodester Task Management System is a task management system. A SQL injection vulnerability exists in PHP Task Management System version v.1.0, which could allow remote attackers to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php and...

9.8CVSS5.9AI score0.0063EPSS
SaveExploits0References3
CVE
CVE
•added 2024/04/24 12:00 a.m.•77 views

CVE-2024-28613

CVE-2024-28613 describes an SQL Injection vulnerability in PHP Task Management System v1.0. The flaw allows a remote attacker to escalate privileges and access sensitive information through the task_id parameter used by task-details.php and edit-task.php. Public references in the initial and conn...

9.8CVSS5.9AI score0.0063EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
•added 2024/04/19 2:18 a.m.•11 views

SUSE CVE-2024-26845

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is added to tmrlist but does not go to target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort and waits for...

5.5CVSS5.9AI score0.00741EPSS
SaveExploits0References16
osv_debian
osv_debian
•added 2024/04/17 10:15 a.m.•5 views

DEBIAN-CVE-2024-26845

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is added to tmrlist but does not go to target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort and waits for...

5.5CVSS6.1AI score0.00741EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/04/17 10:15 a.m.•15 views

UBUNTU-CVE-2024-26845

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is added to tmrlist but does not go to target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort and waits for...

8.7CVSS6.1AI score0.00741EPSS
SaveExploits0References23
osv_cve
osv_cve
•added 2024/04/15 7:15 p.m.•20 views

CVE-2024-28556

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...

9.8CVSS6.6AI score0.01233EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/15 7:15 p.m.•32 views

CVE-2024-28557

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php...

9.8CVSS8.1AI score0.01233EPSS
SaveExploits1References2
CVE
CVE
•added 2024/04/15 12:00 a.m.•71 views

CVE-2024-28556

The Sourcecodester php task management system v1.0 is affected by an SQL Injection vulnerability (CWE-89). A remote attacker can exploit this by sending a crafted payload to the admin-manage-user.php endpoint. Successful exploitation can lead to arbitrary code execution , privilege escalation , a...

9.8CVSS6.6AI score0.01233EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2024/04/15 12:00 a.m.•71 views

CVE-2024-28557

The Sourcecodester php task management system v1.0 is vulnerable to a SQL Injection vulnerability in the update-admin.php API endpoint. A remote attacker can exploit this by sending a crafted payload to execute arbitrary code, escalate privileges, and obtain sensitive information. To mitigate thi...

9.8CVSS6.6AI score0.01233EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•10 views

CVE-2024-28557: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php...

9.8CVSS6.6AI score0.01233EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•8 views

CVE-2024-28556: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...

9.8CVSS6.6AI score0.01233EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/04/15 12:00 a.m.•43 views

CVE-2024-28557

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php...

8.4AI score0.01233EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•9 views

PT-2024-22460

Name of the Vulnerable Software and Affected Versions Sourcecodester php task management system version 1.0 Description The issue allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the "update-admin.php" API endpoint...

9.8CVSS6.6AI score0.01233EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•9 views

PT-2024-22459

Name of the Vulnerable Software and Affected Versions Sourcecodester php task management system version 1.0 Description The issue allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the "admin-manage-user.php" endpoint...

9.8CVSS6.5AI score0.01233EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•17 views

SourceCodester Task Management System security vulnerabilities

SourceCodester Task Management System is a task management system. A security vulnerability exists in SourceCodester Task Management System v1.0 that could allow a remote attacker to execute arbitrary code, elevate privileges, and obtain sensitive information via update-admin.php using a crafted...

9.8CVSS6.6AI score0.01233EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/04/15 12:00 a.m.•40 views

CVE-2024-28556

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...

8.4AI score0.01233EPSS
SaveExploits1References2
Rows per page
Query Builder