CVE-2025-4248

CVE-2025-4248 affects SourceCodester Simple To-Do List System 1.0. The vulnerability arises in the file /complete_task.php where manipulating the ID parameter enables SQL injection. Multiple connected sources confirm remote exploitation and public disclosure of the exploit. Impact is described ac...

CVE-2025-4247

CVE-2025-4247 affects SourceCodester Simple To-Do List System 1.0. The vulnerability exists in an unknown function of the file /delete_task.php, where manipulation of the ID parameter enables SQL injection. Remote exploitation is possible, and public exploits have been disclosed. The CVE entry no...

CVE-2025-10117

CVE-2025-10117 affects SourceCodester Simple To-Do List System 1.0. The vulnerability is in the Add New Task workflow, specifically the /fetch_tasks.php function, where input manipulation (e.g., ) can trigger a cross-site scripting attack. It is exploitable remotely and the exploit has been publi...

CVE-2025-63709

CVE-2025-63709 is a stored XSS in SourceCodester Simple To-Do List System 1.0, occurring in the Add Tasks input. An authenticated user can submit HTML/JS not properly sanitized, with the injected script stored and later rendered for other users, enabling arbitrary script execution in the victim’s...