Lucene search
+L

5 matches found

NVD
NVD
•added 2024/02/08 9:15 p.m.•96 views

CVE-2024-24496

An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components...

9.8CVSS9.4AI score0.19503EPSS
SaveExploits4References1
CVE
CVE
•added 2024/02/08 12:00 a.m.•158 views

CVE-2024-24495

CVE-2024-24495 is a SQL injection vulnerability affecting Daily Habit Tracker version 1.0, arising from the delete-tracker.php endpoint. Remote attackers can craft a GET request to trigger arbitrary code execution due to insecure handling of input in the targeted PHP file. The Red Hat advisory co...

9.8CVSS9.8AI score0.0133EPSS
SaveExploits4References1Affected Software1
Cvelist
Cvelist
•added 2024/02/08 12:00 a.m.•51 views

CVE-2024-24495

SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...

10AI score0.0133EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/08 12:00 a.m.•1 views

CVE-2024-24495: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...

9.8CVSS6.6AI score0.0133EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/08 12:00 a.m.•1 views

CVE-2024-24496: Improper Authentication

An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components...

9.8CVSS5.9AI score0.19503EPSS
SaveExploits4References4
Rows per page
Query Builder