CVE-2024-25218

CVE-2024-25218 is a cross-site scripting (XSS) vulnerability in Task Manager App v1.0 where an attacker can inject arbitrary scripts via the Project Name parameter in /TaskManager/Projects.php. The issue originates from unsanitized input in the API endpoint, enabling script execution in a user’s ...

CVE-2024-25220

CVE-2024-25220 : Task Manager App v1.0 is affected by a SQL injection vulnerability exploitable via the taskID parameter on /TaskManager/EditTask.php. The CVSS v3.1 metrics in the public entry show a_CRITICAL_ base score of 9.8 with NETWORK attack vector, LOW attack complexity, and NONE privilege...

PT-2024-20833 · Unknown · Task Manager App

Name of the Vulnerable Software and Affected Versions: Task Manager App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the projectID parameter at the "/TaskManager/EditProject.php" API endpoint. Recommendations: For Task...

CVE-2024-25222: Improper Neutralization of Special Elements used in an SQL Command

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php...

Task Manager Cross-Site Scripting Vulnerability

Task Manager is an open source task manager application from Code-Projects. Task Manager v1.0 suffers from a cross-site scripting vulnerability that originates from a cross-site scripting XSS vulnerability in the file /TaskManager/Tasks.php...

CVE-2024-25222

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php...

Task Manager SQL Injection Vulnerability

Task Manager is an open source task manager application from Code-Projects. Task Manager v1.0 has a SQL injection vulnerability , the vulnerability stems from the file /TaskManager/EditProject.php has a SQL injection vulnerability...

CVE-2024-25222

CVE-2024-25222 affects Task Manager App v1.0, with a SQL injection vulnerability in the /TaskManager/EditProject.php endpoint, exploitable via the projectID parameter. The CVSSv3.1 vector/metrics indicate a CRITICAL impact (CVSS 9.8; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected sources confirm...

CVE-2024-24142

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

CVE-2024-24142

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

CVE-2024-24142: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

CVE-2024-24142

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

School Task Manager Security Vulnerability

School Task Manager is a school task manager by rems individual developer. A security vulnerability exists in Sourcecodester School Task Manager version 1.0, which stems from a SQL injection vulnerability in the subject parameter...

CVE-2024-24142

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...

CVE-2024-24142

CVE-2024-24142 affects Sourcecodester School Task Manager 1.0. The issue is a SQL Injection in the GET parameter subject , caused by insufficient input handling. Impact is high (Confidentiality/Integrity/Availability) with CVSS v3.1 base score of 9.8 (NETWORK, LOW access complexity, NONE privileg...

Exploit for CVE-2024-22890

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...

CVE-2024-24141

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...

CVE-2024-24141

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...

Sql injection

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...

PT-2024-20293 · Unknown · Sourcecodester School Task Manager

Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager App version 1.0 Description: The issue allows SQL Injection via the task parameter. This could potentially be exploited to extract or modify sensitive data. There is no information provided about the estimat...