Lucene search
+L

104 matches found

Vulnrichment
Vulnrichment
added 2024/07/11 12:0 a.m.17 views

CVE-2024-6653 code-projects Simple Task List Login loginForm.php sql injection

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS7.5AI score0.00797EPSS
SaveExploits1References4
Packet Storm
Packet Storm
added 2024/03/20 12:0 a.m.474 views

Simple Task List 1.0 SQL Injection

Exploit Title: Simple Task List 1.0 - 'status' SQLi Date: 2023-11-15 Exploit Author: Ersin Erenler Vendor Homepage: https://code-projects.org/simple-task-list-in-php-with-source-code Software Link: https://download-media.code-projects.org/2020/12/SimpleTaskListInPHPWithSourceCode.zip Version: 1.0...

6.5CVSS7.4AI score0.00583EPSS
SaveExploits3
Exploit DB
Exploit DB
added 2024/03/20 12:0 a.m.459 views

Simple Task List 1.0 - 'status' SQLi

Exploit Title: Simple Task List 1.0 - 'status' SQLi Date: 2023-11-15 Exploit Author: Ersin Erenler Vendor Homepage: https://code-projects.org/simple-task-list-in-php-with-source-code Software Link: https://download-media.code-projects.org/2020/12/SimpleTaskListInPHPWithSourceCode.zip Version: 1.0...

6.5CVSS6.4AI score0.00583EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2023/11/14 10:15 p.m.3 views

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

6.5CVSS5.9AI score0.00583EPSS
SaveExploits3References2
Prion
Prion
added 2023/11/14 10:15 p.m.28 views

Sql injection

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

4CVSS7.6AI score0.00583EPSS
SaveExploits3References1Affected Software1
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.9 views

Code-Projects Simple Task List Security Vulnerability

Code-Projects Simple Task List is Code-Projects open source a simple task list system . Code-Projects Simple Task List version 1.0 has a security vulnerability , the vulnerability stems from allowing an attacker to obtain sensitive information through the status parameter in addTask.php...

6.5CVSS6.5AI score0.00583EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
added 2023/11/14 12:0 a.m.14 views

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

7.2AI score0.00583EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2023/11/14 12:0 a.m.59 views

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

6.8AI score0.00583EPSS
SaveExploits3References1
CVE
CVE
added 2023/11/14 12:0 a.m.69 views

CVE-2023-46023

CVE-2023-46023 affects Code-Projects Simple Task List 1.0. The vulnerability is a SQL injection in addTask.php caused by improper handling of the status parameter, allowing an attacker to obtain sensitive information. Public sources (e.g., Exploit DB and PacketStorm) provide a PoC and exploit det...

6.5CVSS6.5AI score0.00583EPSS
SaveExploits3References1Affected Software1
CVE
CVE
added 2023/04/02 7:0 a.m.46 views

CVE-2023-1791

CVE-2023-1791 affects SourceCodester Simple Task Allocation System 1.0. The vulnerability is in the file manage_user.php where manipulation of the id parameter leads to a SQL injection. The issue is exploitable remotely and has been disclosed publicly. Multiple sources corroborate the impact as a...

9.8CVSS8.3AI score0.00608EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/04/02 7:0 a.m.36 views

CVE-2023-1791 SourceCodester Simple Task Allocation System manage_user.php sql injection

A vulnerability has been found in SourceCodester Simple Task Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. Th...

6.5CVSS10AI score0.00608EPSS
SaveExploits0References3
OSV
OSV
added 2023/04/01 9:15 a.m.5 views

CVE-2023-1790

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to launch the attack remotely. The...

7.5CVSS5.4AI score0.00641EPSS
SaveExploits0References3
CVE
CVE
added 2023/04/01 9:0 a.m.68 views

CVE-2023-1790

CVE-2023-1790 affects SourceCodester Simple Task Allocation System 1.0, with information disclosure caused by manipulating the page parameter in index.php. Attacker can exploit remotely; public exploit disclosed. Multiple connected sources corroborate the issue and describe a classic information-...

7.5CVSS5.8AI score0.00641EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/29 8:15 a.m.16 views

Cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=registeruser. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the...

4CVSS6.1AI score0.00363EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/02/17 2:15 p.m.56 views

CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

9.8CVSS10AI score0.20693EPSS
SaveExploits5References4
Prion
Prion
added 2023/02/17 2:15 p.m.13 views

Sql injection

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

7.5CVSS10AI score0.20693EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
added 2023/02/17 12:0 a.m.68 views

CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

10AI score0.20693EPSS
SaveExploits5References4
Vulnrichment
Vulnrichment
added 2023/02/17 12:0 a.m.7 views

CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

8.6AI score0.20693EPSS
SaveExploits5References4
CVE
CVE
added 2023/02/17 12:0 a.m.141 views

CVE-2022-40032

The CVE-2022-40032 entry pertains to Simple Task Managing System v1.0, with a SQL Injection in login.php via the username/login and password fields. The connected documents confirm unauthenticated injection that can lead to arbitrary database queries and sensitive data exposure, including user cr...

9.8CVSS10AI score0.20693EPSS
SaveExploits5References4Affected Software1
NVD
NVD
added 2022/09/21 6:15 p.m.27 views

CVE-2022-40029

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter...

4.8CVSS0.00466EPSS
SaveExploits1References2
Rows per page
Query Builder