Lucene search
+L

569 matches found

CVE
CVE
•added 2024/03/25 12:00 a.m.•73 views

CVE-2024-29302

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via the update-employee.php file. The root cause is the improper neutralization of special elements in the admin_id parameter, which is taken directly from $_GET and used in an SQL query. This vulnerability allows for po...

7.5CVSS8.1AI score0.00788EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/25 12:00 a.m.•18 views

CVE-2024-29301

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?adminid=...

8.2AI score0.00846EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2024/03/25 12:00 a.m.•17 views

CVE-2024-29303

The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection...

8.1AI score0.0093EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/03/25 12:00 a.m.•36 views

CVE-2024-29301

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?adminid=...

8AI score0.00846EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2024/03/25 12:00 a.m.•20 views

PT-2024-22852 · Sourcecodester · Sourcecodester Php Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP Task Management System version 1.0 Description: The issue is related to SQL Injection via the update-admin.php endpoint, specifically through the admin id parameter. This allows for potential exploitation. No information is...

7.5CVSS8.2AI score0.00846EPSS
SaveExploits2References9
Vulnrichment
Vulnrichment
•added 2024/03/25 12:00 a.m.•16 views

CVE-2024-29302

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...

8.2AI score0.00788EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/03/25 12:00 a.m.•45 views

CVE-2024-29302

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...

8AI score0.00788EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/03/25 12:00 a.m.•15 views

PHP Task Management System 安全漏洞

SourceCodester Task Management System is a task management system. A security vulnerability exists in PHP Task Management System version 1.0 that stems from vulnerability to SQL injection attacks via update-employee.php...

7.5CVSS7.9AI score0.00788EPSS
SaveExploits2References2
CVE
CVE
•added 2024/03/25 12:00 a.m.•76 views

CVE-2024-29301

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection through the update-admin.php endpoint, specifically via the admin_id parameter. This vulnerability allows for potential exploitation of the underlying database. As a temporary workaround, it is recommended to restrict ac...

7.5CVSS8.1AI score0.00846EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
•added 2024/03/25 12:00 a.m.•16 views

PHP Task Management System 安全漏洞

SourceCodester Task Management System is a task management system. A security vulnerability exists in PHP Task Management System version 1.0, which stems from the deletion of the administrator user function being vulnerable to SQL injection attacks...

9.8CVSS7.9AI score0.0093EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2024/03/25 12:00 a.m.•18 views

PT-2024-22853 · Sourcecodester · Sourcecodester Php Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP Task Management System version 1.0 Description: The issue is related to SQL Injection via the update-employee.php file. This allows for potential exploitation. No information is provided about the estimated number of...

7.5CVSS8.2AI score0.00788EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/25 12:00 a.m.•5 views

CVE-2024-29301: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?adminid=...

7.5CVSS5.8AI score0.00846EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/25 12:00 a.m.•9 views

CVE-2024-29302: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...

7.5CVSS5.8AI score0.00788EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/25 12:00 a.m.•4 views

CVE-2024-29303: Improper Neutralization of Special Elements used in an SQL Command

The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection...

9.8CVSS5.8AI score0.0093EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2024/03/22 12:00 a.m.•335 views

Task Management System 1.0 SQL Injection

Exploit Title: SourceCodester PHP Task Management System 1.0 update-employee.php - SQL Injection Date: 22 March 2024 Exploit Author: Gnanaraj Mauviel @0xm3m Vendor Homepage: https://www.sourcecodester.com/php/17217/employee-management-system-php-and-mysql-free-download.html Software Link:...

7.4AI score0.0093EPSS
SaveExploits4
OSV
OSV
•added 2024/03/18 10:07 a.m.•14 views

CVE-2023-52609 binder: fix race between mmput() and do_exit()

In the Linux kernel, the following vulnerability has been resolved: binder: fix race between mmput and doexit Task A calls binderupdatepagerange to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm via mmgetnotzero first. This can race with Task ...

5.6AI score
SaveExploits0References13
NVD
NVD
•added 2024/03/18 3:15 a.m.•39 views

CVE-2024-2577

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

9.8CVSS7.3AI score0.00669EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/18 2:31 a.m.•90 views

CVE-2024-2577

SourceCodester SourceCodeSter Employee Task Management System 1.0 is affected by a critical vulnerability in the /update-employee.php file. The issue stems from manipulating the admin_id parameter, causing an authorization bypass. The vulnerability is described as exploitable remotely and disclos...

9.8CVSS7.3AI score0.00669EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/03/18 2:31 a.m.•68 views

CVE-2024-2577 SourceCodester Employee Task Management System update-employee.php authorization

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

7.5CVSS7.5AI score0.00669EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/18 2:31 a.m.•30 views

CVE-2024-2577 SourceCodester Employee Task Management System update-employee.php authorization

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

7.5CVSS7.3AI score0.00669EPSS
SaveExploits0References3
Rows per page
Query Builder