5 matches found
CVE-2022-44291
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php...
Sql injection
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php...
CVE-2022-44291
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php...
CVE-2022-44291
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php...
CVE-2022-44291
WebTareas 2.4p5 contains a SQL injection vulnerability exposed via the id parameter in phasesets.php. The Nuclei template and multiple sources describe an SQL injection that could enable time-based extraction of data (e.g., project phases, task data, user credentials) without authentication. Root...