Employee Task Management System 1.0 SQL Injection

Employee Task Management System - SQL Injection on task-details.php?taskid=? with low privilege authentication Date: 17 February 2023 CVE Assigned: CVE-2023-0904 mitre.org, nvd.nist.org Author Email: [email protected] Vendor Homepage: https://www.sourcecodester.com Software Link: Employe...

CVE-2023-0905

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

CVE-2023-0904

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

Authentication flaw

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

Sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2023-0905

CVE-2023-0905 affects SourceCodester Employee Task Management System v1.0, specifically the file changePasswordForEmployee.php, where improper authentication is triggered by an unknown function. The vulnerability can be exploited remotely and has been disclosed publicly; an exploit is tracked in ...

CVE-2023-0905 SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

CVE-2023-0904 SourceCodester Employee Task Management System task-details.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2023-0904

CVE-2023-0904 affects SourceCodester Employee Task Management System v1.0. A SQL injection flaw exists in task-details.php arising from manipulation of the task_id parameter, enabling remote exploitation. Public exploit references (e.g., Exploit-DB) corroborate a remote attack vector. The vulnera...

CVE-2023-0903 SourceCodester Employee Task Management System edit-task.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the argument taskid leads to sql injection. The attack can be initiated remotely. The complexit...

CVE-2023-0903

The CVE-2023-0903 entry concerns SourceCodester Employee Task Management System v1.0. The vulnerability resides in edit-task.php where manipulating the task_id parameter enables SQL injection, giving remote attackers the ability to affect the database. The issue has been characterized as high-sev...

Employee Task Management System 授权问题漏洞

Employee Task Management System is an employee task management system by Carlo Montero Personal Developer. An authorization issue vulnerability exists in Employee Task Management System version 1.0, which stems from incorrect authentication...

Employee Task Management System SQL注入漏洞

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the taskid parameter that can lead to sql injection...

Employee Task Management System SQL注入漏洞

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the taskid parameter that can lead to sql injection...

Simple Task Managing System SQL注入漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System version 1.0, which is caused by an SQL injection in the username and password parameters of login.php, and can be exploited by an attacker to execute arbitrary code and...

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which is caused by a cross-site scripting vulnerability in the shortName parameter of the newProjectValidation.php component...

Simple Task Managing System SQL注入漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which was discovered to contain an SQL injection vulnerability via the bookId parameter on board.php...

Simple Task Managing System SQL注入漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in version v1.0 of Simple Task Managing System due to an SQL injection vulnerability in the bookId parameter of the changeStatus.php component...

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. Simple Task Managing System suffers from a cross-site scripting vulnerability that stems from its unknown code manipulation of the parameter studentadd resulting in cross-site scripting. The attack method can be initiated remotely an...