Cross site scripting

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter...

Sql injection

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php...

CVE-2022-40030

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php...

CVE-2022-40030

CVE-2022-40030 affects SourceCodester Simple Task Managing System v1.0. The vulnerability is a SQL injection in the bookId parameter of changeStatus.php. This affects the authentication/authorization boundary and can lead to data disclosure/modification per the CVSS 3.1 metrics (CRITICAL, 9.8) wi...

CVE-2022-40030

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php...

CVE-2022-40029

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter...

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

CVE-2022-40028

CVE-2022-40028 affects SourceCodester Simple Task Managing System v1.0. The issue is a cross-site scripting (XSS) vulnerability in the newProjectValidation.php component, exploitable via a crafted payload in the fullName parameter, enabling arbitrary web scripts/HTML execution. Root cause is insu...

CVE-2022-40027

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter...

CVE-2022-40026

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php...

CVE-2022-40026

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php...

CVE-2022-40026

CVE-2022-40026 affects SourceCodester Simple Task Managing System v1.0. A SQL injection vulnerability is exploitable via the bookId parameter in board.php, with a NVD/CVSSv3.1 base score of 7.2 (HIGH) and impacts to confidentiality, integrity, and availability. Root cause is improper input handli...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated...

CVE-2022-3014

The CVE-2022-3014 entry concerns a cross-site scripting flaw in SourceCodester Simple Task Managing System caused by manipulating the student_add parameter. Multiple connected sources confirm this vulnerability stems from unknown code paths and can be exploited remotely, impacting the affected sy...

CVE-2022-3014 SourceCodester Simple Task Managing System cross site scripting

A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument studentadd leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is...

PT-2022-20016 · Sourcecodester · Sourcecodester Simple Task Managing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Task Managing System affected versions not specified Description: A critical vulnerability has been found in the SourceCodester Simple Task Managing System, affecting an unknown part of the file /loginVaLidation.php. The...