Lucene search
+L

128 matches found

Vulnrichment
Vulnrichment
•added 2024/07/11 12:00 a.m.•20 views

CVE-2024-6653 code-projects Simple Task List Login loginForm.php sql injection

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS7.5AI score0.00797EPSS
SaveExploits1References4
CVE
CVE
•added 2024/07/11 12:00 a.m.•71 views

CVE-2024-6653

The CVE-2024-6653 entry concerns code-projects Simple Task List 1.0, with SQL injection vulnerability in the Login component’s loginForm.php caused by improper handling of the username argument. The vulnerability is exploitable remotely, and public exploit information exists per sources; CVSS dat...

9.8CVSS7.5AI score0.00797EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/11 12:00 a.m.•5 views

CVE-2024-6653: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS7AI score0.00797EPSS
SaveExploits1References1
Exploit DB
Exploit DB
•added 2024/03/20 12:00 a.m.•468 views

Simple Task List 1.0 - 'status' SQLi

Exploit Title: Simple Task List 1.0 - 'status' SQLi Date: 2023-11-15 Exploit Author: Ersin Erenler Vendor Homepage: https://code-projects.org/simple-task-list-in-php-with-source-code Software Link: https://download-media.code-projects.org/2020/12/SimpleTaskListInPHPWithSourceCode.zip Version: 1.0...

6.5CVSS6.4AI score0.00583EPSS
SaveExploits3
Packet Storm
Packet Storm
•added 2024/03/20 12:00 a.m.•486 views

Simple Task List 1.0 SQL Injection

Exploit Title: Simple Task List 1.0 - 'status' SQLi Date: 2023-11-15 Exploit Author: Ersin Erenler Vendor Homepage: https://code-projects.org/simple-task-list-in-php-with-source-code Software Link: https://download-media.code-projects.org/2020/12/SimpleTaskListInPHPWithSourceCode.zip Version: 1.0...

6.5CVSS7.4AI score0.00583EPSS
SaveExploits3
attackerkb
attackerkb
•added 2023/11/14 10:15 p.m.•9 views

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

6.5CVSS5.9AI score0.00583EPSS
SaveExploits3References2
Prion
Prion
•added 2023/11/14 10:15 p.m.•36 views

Sql injection

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

4CVSS7.6AI score0.00583EPSS
SaveExploits3References1Affected Software1
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•21 views

Code-Projects Simple Task List Security Vulnerability

Code-Projects Simple Task List is Code-Projects open source a simple task list system . Code-Projects Simple Task List version 1.0 has a security vulnerability , the vulnerability stems from allowing an attacker to obtain sensitive information through the status parameter in addTask.php...

6.5CVSS6.5AI score0.00583EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•2 views

CVE-2023-46023: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

6.5CVSS6.6AI score0.00583EPSS
SaveExploits3References2
Cvelist
Cvelist
•added 2023/11/14 12:00 a.m.•69 views

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

6.8AI score0.00583EPSS
SaveExploits3References1
CVE
CVE
•added 2023/11/14 12:00 a.m.•86 views

CVE-2023-46023

CVE-2023-46023 affects Code-Projects Simple Task List 1.0. The vulnerability is a SQL injection in addTask.php caused by improper handling of the status parameter, allowing an attacker to obtain sensitive information. Public sources (e.g., Exploit DB and PacketStorm) provide a PoC and exploit det...

6.5CVSS6.5AI score0.00583EPSS
SaveExploits3References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/14 12:00 a.m.•16 views

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

7.2AI score0.00583EPSS
SaveExploits3References1
CVE
CVE
•added 2023/04/02 7:00 a.m.•57 views

CVE-2023-1791

CVE-2023-1791 affects SourceCodester Simple Task Allocation System 1.0. The vulnerability is in the file manage_user.php where manipulation of the id parameter leads to a SQL injection. The issue is exploitable remotely and has been disclosed publicly. Multiple sources corroborate the impact as a...

9.8CVSS8.3AI score0.00608EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/04/02 7:00 a.m.•46 views

CVE-2023-1791 SourceCodester Simple Task Allocation System manage_user.php sql injection

A vulnerability has been found in SourceCodester Simple Task Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. Th...

6.5CVSS10AI score0.00608EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/02 12:00 a.m.•2 views

CVE-2023-1791: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Simple Task Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS5.5AI score0.00608EPSS
SaveExploits0References3
OSV
OSV
•added 2023/04/01 9:15 a.m.•15 views

CVE-2023-1790

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to launch the attack remotely. The...

7.5CVSS5.4AI score0.00641EPSS
SaveExploits0References3
CVE
CVE
•added 2023/04/01 9:00 a.m.•77 views

CVE-2023-1790

CVE-2023-1790 affects SourceCodester Simple Task Allocation System 1.0, with information disclosure caused by manipulating the page parameter in index.php. Attacker can exploit remotely; public exploit disclosed. Multiple connected sources corroborate the issue and describe a classic information-...

7.5CVSS5.8AI score0.00641EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/01 12:00 a.m.•3 views

CVE-2023-1790: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to launch the attack remotely. The...

7.5CVSS5.4AI score0.00641EPSS
SaveExploits0References2
Prion
Prion
•added 2023/03/29 8:15 a.m.•25 views

Cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=registeruser. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the...

4CVSS6.1AI score0.00363EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/29 12:00 a.m.•2 views

CVE-2023-1687: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=registeruser. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the...

6.1CVSS4.1AI score0.00363EPSS
SaveExploits0References3
Rows per page
Query Builder