CVE-2024-35723

Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through = 1.2.0...

CVE-2024-37539

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.3.0...

CVE-2025-4248

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /completetask.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

CVE-2025-4248

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /completetask.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

CVE-2025-4248

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /completetask.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

CVE-2025-4248 SourceCodester Simple To-Do List System complete_task.php sql injection

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /completetask.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

CVE-2025-4247

A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /deletetask.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4247 SourceCodester Simple To-Do List System delete_task.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /deletetask.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4247 SourceCodester Simple To-Do List System delete_task.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /deletetask.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4247

CVE-2025-4247 affects SourceCodester Simple To-Do List System 1.0. The vulnerability exists in an unknown function of the file /delete_task.php, where manipulation of the ID parameter enables SQL injection. Remote exploitation is possible, and public exploits have been disclosed. The CVE entry no...

SourceCodester Simple To-Do List System 安全漏洞

SourceCodester Simple To-Do List System is a SourceCodester open source simple to-do list system. A security vulnerability exists in SourceCodester Simple To-Do List System version 1.0, which is caused by SQL injection due to incorrect manipulation of the parameter ID in the file /completetask.ph...

PT-2025-18962 · Unknown · Sourcecodester Simple To-Do List System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple To-Do List System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Simple To-Do List System, affecting an unknown functionality of the file /complete task.php. The manipulation of th...

PT-2025-18961 · Unknown · Sourcecodester Simple To-Do List System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple To-Do List System version 1.0 Description: A critical vulnerability was found in the SourceCodester Simple To-Do List System. The issue affects an unknown function of the file /delete task.php. The manipulation of the ID...

Leantime allows Cross-Site Scripting (XSS)

Summary There is a cross-site scripting vulnerability on To-Do that affects a title field of a To-Do...

GHSA-F679-254H-QHVJ Leantime allows Cross-Site Scripting (XSS)

Summary There is a cross-site scripting vulnerability on To-Do that affects a title field of a To-Do...

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

CVE-2024-46081

Scriptcase versions 9.10.023 and earlier are affected by a Cross Site Scripting (XSS) vulnerability in the To-Do List. An authenticated user can craft payloads that trigger a stored XSS when the assigned user interacts with tasks, with the effect of exposing other users to injected content. Affec...

PT-2024-31901 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue allows an authenticated user to craft malicious payloads in the To-Do List, triggering a stored Cross Site Scripting XSS attack when the assigned user interacts with the task. Th...