CVE-2024-24141

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...

PT-2024-20293 · Unknown · Sourcecodester School Task Manager

Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager App version 1.0 Description: The issue allows SQL Injection via the task parameter. This could potentially be exploited to extract or modify sensitive data. There is no information provided about the estimat...

CVE-2022-24589

Burden v3.0 was discovered to contain a stored cross-site scripting XSS in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter...

PT-2022-16741

Name of the Vulnerable Software and Affected Versions Burden version 3.0 Description The issue is related to a stored cross-site scripting XSS in the Add Category function. This allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter. Recommendations...

CVE-2022-24589: Improper Neutralization of Input During Web Page Generation

Burden v3.0 was discovered to contain a stored cross-site scripting XSS in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter...

PT-2019-13835

Name of the Vulnerable Software and Affected Versions Limb Gallery plugin version 1.4.0 Description The issue concerns a cross-site scripting XSS problem. It is exploited through the "wp-admin/admin-ajax.php?action=grsGalleryAjax&grsAction=shortcode" API endpoint, specifically via the task...

CVE-2019-7425

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter...

Cross site scripting

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter...

CVE-2019-7425: Improper Neutralization of Input During Web Page Generation

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter...

PT-2019-18599

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue exists in the Administration zone of the software, specifically in the "/netflow/jspui/linkdownalertConfig.jsp" file. The task parameter is vulnerable...

Cross site scripting

includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...

CVE-2019-7748: Improper Neutralization of Input During Web Page Generation

includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...

PT-2018-17268

Name of the Vulnerable Software and Affected Versions: Joomla! Advertisement Board version 3.1.0 Description: A SQL Injection issue exists in the Advertisement Board component for Joomla!. This issue can be exploited via a task=show rss categories&catname= request. Recommendations: For...

CVE-2017-14717

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter...

PT-2012-1996

Name of the Vulnerable Software and Affected Versions Elxis CMS versions 2009.2 through 2009.3 Aphrodite before revision 2684 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the task parameter to "elxis/index.php" and PATH INFO to...

CVE-2011-4918: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 2684 allow remote attackers to inject arbitrary web script or HTML via the 1 task parameter to elxis/index.php, and 2 PATHINFO to elxis/administrator/index.php...

CVE-2012-1219

Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...

PT-2011-1718

Name of the Vulnerable Software and Affected Versions com jimtawl version 1.0.2 Description The issue allows remote attackers to read arbitrary files and possibly have other impacts via a .. dot dot in the task parameter to "index.php". Recommendations For version 1.0.2, update to a version that...

CVE-2010-4769: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Jimtawl comjimtawl component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the task parameter to index.php...

CVE-2010-1540: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. NOTE: some of these details are obtained from third party information...