5 matches found
CVE-2022-44291
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php...
9.8CVSS8.2AI score0.03587EPSS
SaveExploits1References1
Sql injection
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php...
7.5CVSS9.7AI score0.03587EPSS
SaveExploits1References2Affected Software1
CVE-2022-44291
WebTareas 2.4p5 contains a SQL injection vulnerability exposed via the id parameter in phasesets.php. The Nuclei template and multiple sources describe an SQL injection that could enable time-based extraction of data (e.g., project phases, task data, user credentials) without authentication. Root...
9.8CVSS9.8AI score0.03587EPSS
SaveExploits1References1Affected Software1
20