31 matches found
CVE-2024-3223: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester PHP Task Management System 1.0. Affected is an unknown function of the file admin-manage-user.php. The manipulation of the argument adminid leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2024-3224: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack can be launched remotely...
CVE-2024-3222: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester PHP Task Management System 1.0. This issue affects some unknown processing of the file admin-password-change.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...
CVE-2024-29302
SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...
CVE-2024-29301
SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?adminid=...
CVE-2024-29302
SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via the update-employee.php file. The root cause is the improper neutralization of special elements in the admin_id parameter, which is taken directly from $_GET and used in an SQL query. This vulnerability allows for po...
CVE-2024-29302: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...
CVE-2024-29301: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?adminid=...
CVE-2024-29303: Improper Neutralization of Special Elements used in an SQL Command
The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection...
