Lucene search
+L

7618 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•1 views

CVE-2024-2575: Authorization Bypass Through User-Controlled Key

A vulnerability, which was classified as critical, has been found in SourceCodester Employee Task Management System 1.0. Affected by this issue is some unknown functionality of the file /task-details.php. The manipulation of the argument taskid leads to authorization bypass. The attack may be...

9.8CVSS5.4AI score0.00669EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•2 views

CVE-2024-2574: Authorization Bypass Through User-Controlled Key

A vulnerability classified as critical was found in SourceCodester Employee Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-task.php. The manipulation of the argument taskid leads to authorization bypass. The attack can be launched remotely...

9.8CVSS5.4AI score0.00669EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•6 views

CVE-2024-2573: Execution After Redirect (EAR)

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file /task-info.php. The manipulation leads to execution after redirect. It is possible to launch the attack remotely. The exploit has been disclosed...

9.8CVSS5.4AI score0.0103EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/18 12:00 a.m.•15 views

Employee Task Management System Security Vulnerability

Employee Task Management System is an employee task management system by Carlo Montero Personal Developer. A security vulnerability exists in Employee Task Management System version 1.0, which stems from unknown processing in /task-details.php that results in a redirect...

9.8CVSS6.8AI score0.0103EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•4 views

CVE-2024-2577: Authorization Bypass Through User-Controlled Key

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

9.8CVSS5.3AI score0.00669EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•2 views

CVE-2024-2572: Execution After Redirect (EAR)

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /task-details.php. The manipulation leads to execution after redirect. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.4AI score0.0103EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•2 views

CVE-2024-2571: Execution After Redirect (EAR)

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage-admin.php. The manipulation leads to execution after redirect. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.4AI score0.0103EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/03/17 11:31 p.m.•57 views

CVE-2024-2569 SourceCodester Employee Task Management System admin-manage-user.php redirect

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin-manage-user.php. The manipulation leads to execution after redirect. The attack may be launched remotely. The exploit...

7.5CVSS7.5AI score0.01179EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/17 11:31 p.m.•22 views

CVE-2024-2569 SourceCodester Employee Task Management System admin-manage-user.php redirect

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin-manage-user.php. The manipulation leads to execution after redirect. The attack may be launched remotely. The exploit...

7.5CVSS7AI score0.01179EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/17 11:31 p.m.•89 views

CVE-2024-2569

CVE-2024-2569 affects SourceCodester Employee Task Management System 1.0, with a vulnerability in the file /admin-manage-user.php. The issue enables execution after redirect and can be exploited remotely; the exploit has been disclosed publicly. Multiple connected sources corroborate the impact a...

9.8CVSS7.3AI score0.01179EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2024/03/17 8:15 a.m.•26 views

CVE-2024-2556

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.8AI score0.00626EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/17 8:15 a.m.•11 views

CVE-2024-2556

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.7AI score0.00626EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/17 8:00 a.m.•84 views

CVE-2024-2556

The CVE-2024-2556 entry concerns SourceCodester Employee Task Management System 1.0. Affected component: attendance-info.php. Root cause: manipulation of the user_id parameter leads to an SQL injection vulnerability that can be exploited remotely. Exploit information is publicly disclosed per sou...

9.8CVSS6.8AI score0.00626EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/03/17 8:00 a.m.•37 views

CVE-2024-2556 SourceCodester Employee Task Management System attendance-info.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS7AI score0.00626EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/17 8:00 a.m.•16 views

CVE-2024-2556 SourceCodester Employee Task Management System attendance-info.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/17 7:15 a.m.•16 views

CVE-2024-2555

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

7.2CVSS5.8AI score0.00608EPSS
SaveExploits1References3
NVD
NVD
•added 2024/03/17 7:15 a.m.•38 views

CVE-2024-2555

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

7.2CVSS6.8AI score0.00608EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/17 6:31 a.m.•93 views

CVE-2024-2555

CVE-2024-2555 affects SourceCodester Employee Task Management System 1.0, with a vulnerability in the file update-admin.php. The manipulation of the argument admin_id can lead to an SQL injection, exploitable remotely, and the exploit has been disclosed publicly. Multiple sources describe the imp...

7.2CVSS6.8AI score0.00608EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/17 6:31 a.m.•23 views

CVE-2024-2555 SourceCodester Employee Task Management System update-admin.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7.3AI score0.00608EPSS
SaveExploits1References3
NVD
NVD
•added 2024/03/17 5:15 a.m.•25 views

CVE-2024-2554

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file update-employee.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

8.8CVSS6.8AI score0.00695EPSS
SaveExploits1References3
Rows per page
Query Builder