Lucene search
+L

571 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•5 views

CVE-2023-0903: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the argument taskid leads to sql injection. The attack can be initiated remotely. The complexit...

8.8CVSS5.2AI score0.0073EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•3 views

CVE-2023-0905: Improper Authentication

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS5.3AI score0.03189EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•3 views

CVE-2023-0904: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

8.8CVSS5.5AI score0.01684EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2023/02/18 12:00 a.m.•14 views

PT-2023-16607 · Sourcecodester · Sourcecodester Employee Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file changePasswordForEmployee.php, leading to improper authentication. This issue can be...

7.5CVSS7AI score0.03189EPSS
SaveExploits5References6
CNNVD
CNNVD
•added 2023/02/18 12:00 a.m.•21 views

Employee Task Management System SQL Injection Vulnerability

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the taskid parameter that can lead to sql injection...

8.8CVSS6.4AI score0.0073EPSS
SaveExploits5References4
CNNVD
CNNVD
•added 2023/02/18 12:00 a.m.•21 views

Employee Task Management System SQL Injection Vulnerability

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the taskid parameter that can lead to sql injection...

8.8CVSS7AI score0.01684EPSS
SaveExploits5References5
CNNVD
CNNVD
•added 2023/02/18 12:00 a.m.•22 views

Employee Task Management System Authorization Vulnerabilities

Employee Task Management System is an employee task management system by Carlo Montero Personal Developer. An authorization issue vulnerability exists in Employee Task Management System version 1.0, which stems from incorrect authentication...

7.5CVSS7.2AI score0.03189EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
•added 2023/02/18 12:00 a.m.•19 views

PT-2023-16606 · Sourcecodester · Sourcecodester Employee Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical issue affects the processing of the file task-details.php, where the manipulation of the task id argument leads to sql injection. The attack can be initiated...

8.8CVSS7.8AI score0.01684EPSS
SaveExploits5References7
CNNVD
CNNVD
•added 2023/02/17 12:00 a.m.•28 views

Simple Task Managing System SQL injection vulnerability

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System version 1.0, which is caused by an SQL injection in the username and password parameters of login.php, and can be exploited by an attacker to execute arbitrary code and...

9.8CVSS8.6AI score0.20693EPSS
SaveExploits5References6
Veracode
Veracode
•added 2022/10/03 3:38 a.m.•35 views

Malicious Command Execution

xxl-job-core is vulnerable to malicious command execution. Lack of sanitization of new task in task management module of the background management allows an attacker to inject and execute malicious commands...

9.8CVSS9.2AI score0.01623EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2022/09/21 6:15 p.m.•23 views

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

4.8CVSS5.9AI score0.00574EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•25 views

Simple Task Managing System SQL injection vulnerability

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which was discovered to contain an SQL injection vulnerability via the bookId parameter on board.php...

7.2CVSS7.3AI score0.00883EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•23 views

Simple Task Managing System Cross-Site Script Vulnerabilities

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which is caused by a cross-site scripting vulnerability in the shortName parameter of the newProjectValidation.php component...

4.8CVSS4.9AI score0.00574EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•25 views

Simple Task Managing System SQL injection vulnerability

Simple Task Managing System is a simple task management system. A security vulnerability exists in version v1.0 of Simple Task Managing System due to an SQL injection vulnerability in the bookId parameter of the changeStatus.php component...

9.8CVSS8.5AI score0.01482EPSS
SaveExploits1References4
NVD
NVD
•added 2022/09/20 8:15 p.m.•36 views

CVE-2021-46834

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

5.5CVSS0.00163EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/20 7:45 p.m.•54 views

CVE-2021-46834

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

5.6AI score0.00163EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/09/20 7:45 p.m.•15 views

CVE-2021-46834

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

5.4AI score0.00163EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/20 7:45 p.m.•103 views

CVE-2021-46834

CVE-2021-46834 describes a permission-bypass vulnerability in Huawei’s cross-device task management affecting Huawei JAD-AL50 software (version 102.0.0.225). The flaw permits an attacker with local access and low privileges, with no user interaction, to access certain resources on the attacked de...

5.5CVSS5.4AI score0.00163EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/20 12:00 a.m.•8 views

CVE-2021-46834: Incorrect Default Permissions

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

5.5CVSS5.4AI score0.00163EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/27 12:00 a.m.•20 views

Simple Task Managing System Cross-Site Script Vulnerabilities

Simple Task Managing System is a simple task management system. Simple Task Managing System suffers from a cross-site scripting vulnerability that stems from its unknown code manipulation of the parameter studentadd resulting in cross-site scripting. The attack method can be initiated remotely an...

6.1CVSS5.9AI score0.006EPSS
SaveExploits1References3
Rows per page
Query Builder