CVE-2024-6653

The CVE-2024-6653 entry concerns code-projects Simple Task List 1.0, with SQL injection vulnerability in the Login component’s loginForm.php caused by improper handling of the username argument. The vulnerability is exploitable remotely, and public exploit information exists per sources; CVSS dat...

CVE-2024-6808

The CVE-2024-6808 entry concerns itsourcecode Simple Task List 1.0. A flaw in signUp.php’s insertUserRecord allows SQL injection via the username argument, with remote exploitation possible and publicly disclosed exploits. Multiple connected sources corroborate the core details (affected componen...