CVE-2024-3224

CVE-2024-3224 affects SourceCodester PHP Task Management System 1.0, with a vulnerability in the file task-details.php where manipulating the task_id parameter leads to SQL injection. This is a network-accessible issue reported as critical, with public disclosure of exploits per the NVD entry. Th...

CVE-2024-3225

The CVE-2024-3225 entry concerns SourceCodester PHP Task Management System 1.0, where the vulnerability resides in edit-task.php. The issue stems from manipulation of the task_id argument, leading to SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. Multiple...

CVE-2024-3221

CVE-2024-3221 affects SourceCodester PHP Task Management System 1.0, with a vulnerability in attendance-info.php where manipulating the user_id parameter leads to SQL injection. The issue can be exploited remotely and has public disclosure; associated references indicate a high/critical risk depe...

CVE-2024-3223

CVE-2024-3223 affects SourceCodester PHP Task Management System 1.0. The vulnerability resides in the unknown function within the file admin-manage-user.php , where manipulating the parameter admin_id leads to SQL injection . It can be exploited remotely, and public disclosures exist. Connected s...

CVE-2024-3222

CVE-2024-3222 affects SourceCodester PHP Task Management System 1.0, specifically the admin-password-change.php path. The root cause is improper handling of the admin_id parameter, enabling SQL injection. The vulnerability is described as exploitable remotely, with public disclosure of the exploi...

CVE-2024-29303

The SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection within the delete admin users function. This vulnerability allows an attacker to execute unauthorized SQL commands, potentially compromising the integrity and confidentiality of the database. While the specific API e...

CVE-2024-29301

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection through the update-admin.php endpoint, specifically via the admin_id parameter. This vulnerability allows for potential exploitation of the underlying database. As a temporary workaround, it is recommended to restrict ac...

CVE-2024-28613

CVE-2024-28613 describes an SQL Injection vulnerability in PHP Task Management System v1.0. The flaw allows a remote attacker to escalate privileges and access sensitive information through the task_id parameter used by task-details.php and edit-task.php. Public references in the initial and conn...

CVE-2024-29302

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via the update-employee.php file. The root cause is the improper neutralization of special elements in the admin_id parameter, which is taken directly from $_GET and used in an SQL query. This vulnerability allows for po...

CVE-2024-28556

The Sourcecodester php task management system v1.0 is affected by an SQL Injection vulnerability (CWE-89). A remote attacker can exploit this by sending a crafted payload to the admin-manage-user.php endpoint. Successful exploitation can lead to arbitrary code execution , privilege escalation , a...

CVE-2024-28557

The Sourcecodester php task management system v1.0 is vulnerable to a SQL Injection vulnerability in the update-admin.php API endpoint. A remote attacker can exploit this by sending a crafted payload to execute arbitrary code, escalate privileges, and obtain sensitive information. To mitigate thi...