PT-2023-16607 · Sourcecodester · Sourcecodester Employee Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file changePasswordForEmployee.php, leading to improper authentication. This issue can be...

Employee Task Management System SQL注入漏洞

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the taskid parameter that can lead to sql injection...

Simple Task Managing System SQL注入漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System version 1.0, which is caused by an SQL injection in the username and password parameters of login.php, and can be exploited by an attacker to execute arbitrary code and...

Malicious Command Execution

xxl-job-core is vulnerable to malicious command execution. Lack of sanitization of new task in task management module of the background management allows an attacker to inject and execute malicious commands...

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which is caused by a cross-site scripting vulnerability in the shortName parameter of the newProjectValidation.php component...

Simple Task Managing System SQL注入漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in version v1.0 of Simple Task Managing System due to an SQL injection vulnerability in the bookId parameter of the changeStatus.php component...

Simple Task Managing System SQL注入漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which was discovered to contain an SQL injection vulnerability via the bookId parameter on board.php...

CVE-2021-46834

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

CVE-2021-46834

CVE-2021-46834 describes a permission-bypass vulnerability in Huawei’s cross-device task management affecting Huawei JAD-AL50 software (version 102.0.0.225). The flaw permits an attacker with local access and low privileges, with no user interaction, to access certain resources on the attacked de...

CVE-2021-46834

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

CVE-2021-46834

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. Simple Task Managing System suffers from a cross-site scripting vulnerability that stems from its unknown code manipulation of the parameter studentadd resulting in cross-site scripting. The attack method can be initiated remotely an...

[SECURITY] Fedora 36 Update: rt-5.0.3-1.fc36

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitted by a community of users...

CVE-2022-22684

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in task management component in Synology DiskStation Manager DSM before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2022-22684

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in task management component in Synology DiskStation Manager DSM before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2022-22684

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in task management component in Synology DiskStation Manager DSM before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2022-22684

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in task management component in Synology DiskStation Manager DSM before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

PT-2022-15630 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.4-25553 Description: The issue is related to improper neutralization of special elements used in an OS command, allowing remote attackers to execute arbitrary commands via unspecified...

Cross site scripting

Stored XSS in Add New Employee Form in Sourcecodester Employee Daily Task Management System 1.0 Allows Remote Attacker to Inject/Store Arbitrary Code via the Name Field...