Lucene search
+L

416 matches found

CNNVD
CNNVD
•added 2024/02/14 12:00 a.m.•20 views

Task Manager SQL Injection Vulnerability

Task Manager is a Code-Projects open source task manager application . Task Manager v1.0 SQL injection vulnerability , the vulnerability stems from the file / TaskManager / EditTask.php SQL injection vulnerability...

9.8CVSS8AI score0.00681EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•6 views

CVE-2024-25220: Improper Neutralization of Special Elements used in an SQL Command

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php...

9.8CVSS5.9AI score0.00681EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/02/14 12:00 a.m.•13 views

CVE-2024-25220

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php...

9.9AI score0.00681EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/02/14 12:00 a.m.•49 views

CVE-2024-25220

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php...

10AI score0.00681EPSS
SaveExploits1References1
CVE
CVE
•added 2024/02/14 12:00 a.m.•131 views

CVE-2024-25220

CVE-2024-25220 : Task Manager App v1.0 is affected by a SQL injection vulnerability exploitable via the taskID parameter on /TaskManager/EditTask.php. The CVSS v3.1 metrics in the public entry show a_CRITICAL_ base score of 9.8 with NETWORK attack vector, LOW attack complexity, and NONE privilege...

9.8CVSS9.7AI score0.00681EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•20 views

PT-2024-20831 · Unknown · Task Manager App

Name of the Vulnerable Software and Affected Versions: Task Manager App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the taskID parameter at the "/TaskManager/EditTask.php" API endpoint. Recommendations: For Task Manager A...

9.8CVSS9.4AI score0.00681EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•23 views

PT-2024-20828

Name of the Vulnerable Software and Affected Versions Task Manager App version 1.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter in the "/TaskManager/Projects.php" API endpoint...

6.1CVSS6.5AI score0.00411EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2024/02/14 12:00 a.m.•9 views

CVE-2024-25221

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php...

5.9AI score0.00413EPSS
SaveExploits1References1
CVE
CVE
•added 2024/02/14 12:00 a.m.•74 views

CVE-2024-25221

CVE-2024-25221 affects Task Manager App v1.0, where a reflected XSS can be triggered via the Note Section parameter in /TaskManager/Tasks.php. The CVE entry lists a CVSS v3.1 base score of 6.1 (Medium) with network attack vector, low attack complexity, no privileges, user interaction required, an...

6.1CVSS5.8AI score0.00413EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•24 views

PT-2024-20833 · Unknown · Task Manager App

Name of the Vulnerable Software and Affected Versions: Task Manager App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the projectID parameter at the "/TaskManager/EditProject.php" API endpoint. Recommendations: For Task...

9.8CVSS7.4AI score0.00748EPSS
SaveExploits1References5
OSV
OSV
•added 2024/02/13 9:15 p.m.•18 views

CVE-2024-24142

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

9.8CVSS5.7AI score0.01101EPSS
SaveExploits3References1
NVD
NVD
•added 2024/02/13 9:15 p.m.•22 views

CVE-2024-24142

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

9.8CVSS7.8AI score0.01101EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
•added 2024/02/13 12:00 a.m.•11 views

CVE-2024-24142

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

5.7AI score0.01101EPSS
SaveExploits3References1
CVE
CVE
•added 2024/02/13 12:00 a.m.•129 views

CVE-2024-24142

CVE-2024-24142 affects Sourcecodester School Task Manager 1.0. The issue is a SQL Injection in the GET parameter subject , caused by insufficient input handling. Impact is high (Confidentiality/Integrity/Availability) with CVSS v3.1 base score of 9.8 (NETWORK, LOW access complexity, NONE privileg...

9.8CVSS5.7AI score0.01101EPSS
SaveExploits3References1Affected Software1
Cvelist
Cvelist
•added 2024/02/13 12:00 a.m.•36 views

CVE-2024-24142

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

8.1AI score0.01101EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2024/02/13 12:00 a.m.•16 views

School Task Manager Security Vulnerability

School Task Manager is a school task manager by rems individual developer. A security vulnerability exists in Sourcecodester School Task Manager version 1.0, which stems from a SQL injection vulnerability in the subject parameter...

9.8CVSS5.7AI score0.01101EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/13 12:00 a.m.•3 views

CVE-2024-24142: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

9.8CVSS5.7AI score0.01101EPSS
SaveExploits3References3
GithubExploit
GithubExploit
•added 2024/02/09 12:22 p.m.•10 views

Exploit for Improper Access Control in Vitalpbx

VitalPBX - CVE-2024-24386 Vulnerability Title: Command Inject...

7.2CVSS6.4AI score0.01024EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2024/01/30 4:02 p.m.•36 views

Exploit for CVE-2024-22890

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...

9.8CVSS6.3AI score0.01159EPSS
SaveExploits16
NVD
NVD
•added 2024/01/29 8:15 p.m.•52 views

CVE-2024-24141

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...

9.8CVSS10AI score0.01101EPSS
SaveExploits3References1
Rows per page
Query Builder