569 matches found
CVE-2024-28613
SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php, and edit-task.php component...
CVE-2024-28613
CVE-2024-28613 describes an SQL Injection vulnerability in PHP Task Management System v1.0. The flaw allows a remote attacker to escalate privileges and access sensitive information through the task_id parameter used by task-details.php and edit-task.php. Public references in the initial and conn...
PT-2024-22494
Name of the Vulnerable Software and Affected Versions PHP Task Management System version 1.0 Description The issue allows a remote attacker to escalate privileges and obtain sensitive information. This is achieved via the task id parameter of the "task-details.php" and "edit-task.php" components...
CVE-2024-28613: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php, and edit-task.php component...
SUSE CVE-2024-26845
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is added to tmrlist but does not go to target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort and waits for...
DEBIAN-CVE-2024-26845
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is added to tmrlist but does not go to target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort and waits for...
UBUNTU-CVE-2024-26845
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is added to tmrlist but does not go to target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort and waits for...
CVE-2024-28556
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...
CVE-2024-28557
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php...
SourceCodester Task Management System 安全漏洞
SourceCodester Task Management System is a task management system. A security vulnerability exists in SourceCodester Task Management System v1.0 that could allow a remote attacker to execute arbitrary code, elevate privileges, and obtain sensitive information via update-admin.php using a crafted...
PT-2024-22460
Name of the Vulnerable Software and Affected Versions Sourcecodester php task management system version 1.0 Description The issue allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the "update-admin.php" API endpoint...
CVE-2024-28556
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...
CVE-2024-28557
The Sourcecodester php task management system v1.0 is vulnerable to a SQL Injection vulnerability in the update-admin.php API endpoint. A remote attacker can exploit this by sending a crafted payload to execute arbitrary code, escalate privileges, and obtain sensitive information. To mitigate thi...
CVE-2024-28557
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php...
PT-2024-22459
Name of the Vulnerable Software and Affected Versions Sourcecodester php task management system version 1.0 Description The issue allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the "admin-manage-user.php" endpoint...
CVE-2024-28557: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php...
CVE-2024-28556: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...
CVE-2024-28556
The Sourcecodester php task management system v1.0 is affected by an SQL Injection vulnerability (CWE-89). A remote attacker can exploit this by sending a crafted payload to the admin-manage-user.php endpoint. Successful exploitation can lead to arbitrary code execution , privilege escalation , a...
Employee Task Management System in PHP/PDO Free Source Code - admin-manage-user.php SQL injection vulnerability
NAME OF AFFECTED PRODUCTS + Employee Task Management System...
Hands-on Review: Cynomi AI-powered vCISO Platform
The need for vCISO services is growing. SMBs and SMEs are dealing with more third-party risks, tightening regulatory demands and stringent cyber insurance requirements than ever before. However, they often lack the resources and expertise to hire an in-house security executive team. By outsourcin...