Sql injection

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteaccount...

CVE-2022-36681

Summary: CVE-2022-36681 affects Simple Task Scheduling System v1.0, with a SQL injection vulnerability in the id parameter of the endpoint /classes/Master.php?f=delete_account. The root cause is an unsafely handled id value leading to SQL injection. The vulnerability is considered high severity (...

CVE-2022-36681

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteaccount...

CVE-2022-36683

CVE-2022-36683 affects Simple Task Scheduling System v1.0 . It describes a SQL injection vulnerability in the parameter id of /classes/Master.php?f=delete_payment. Root cause: unsanitized input fed into SQL, enabling arbitrary queries. Impact is described as C on confidentiality, integrity, and a...

CVE-2022-36683

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletepayment...

CVE-2022-36682

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletestudent...

CVE-2022-36680

CVE-2022-36680 affects Simple Task Scheduling System v1.0. The vulnerability is a SQL injection in the id parameter of the endpoint /classes/Master.php?f=delete_schedule, enabling potentially unauthorized data access or manipulation. The CVSS v3.1 score is 9.8 (CRITICAL) with network attack vecto...

CVE-2022-36680

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteschedule...

CVE-2022-36679

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...

CVE-2022-36679

CVE-2022-36679 affects Simple Task Scheduling System v1.0 . The vulnerability is a SQL injection that can be triggered via the id parameter in the URL /admin/?page=user/manage_user. The available data identify the root cause as unsafely constructed SQL queries exposing both confidentiality and in...

CVE-2022-36678

CVE-2022-36678 affects Simple Task Scheduling System v1.0. A SQL injection vulnerability exists in the id parameter to /classes/Master.php?f=delete_category, allowing potentially arbitrary SQL execution. The NVD entry rates it as CRITICAL (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected...

CVE-2022-36678

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

PT-2022-23546 · Unknown · Simple Task Scheduling System

Name of the Vulnerable Software and Affected Versions: Simple Task Scheduling System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete category" API endpoint. Recommendation...

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in /classes/Master.php?f=deletestudent...

Ubuntu: Security Advisory (USN-5443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in /classes/Master.php?f=deletecategory...

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in /classes/Master.php?f=deleteaccount...

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in classes/Master.php?f=deletepayment...

XXL-JOB authorization issue vulnerability

XXL-JOB is a distributed task scheduling platform based on the java language from the Xu Xueli XXL-JOB community. all versions of XXL-JOB released after July 11, 2022 have an authorization issue vulnerability that stems from its insecure privilege control, which could be exploited by an attacker ...

IBM Workload Scheduler has an unspecified vulnerability

IBM Workload Scheduler is a set of enterprise task scheduling software from IBM Corporation of the United States. The software automates the control of workloads. IBM Workload Scheduler has a security vulnerability. No details of the vulnerability are currently available...