15 matches found
CVE-2024-2573
SourceCodester Employee Task Management System 1.0 is affected by a vulnerability in an unknown function within /task-info.php that enables execution after a redirect. Exploitation appears possible remotely and public exploit information exists (VDB-257076). Affected documents consistently descri...
CVE-2024-2555
CVE-2024-2555 affects SourceCodester Employee Task Management System 1.0, with a vulnerability in the file update-admin.php. The manipulation of the argument admin_id can lead to an SQL injection, exploitable remotely, and the exploit has been disclosed publicly. Multiple sources describe the imp...
CVE-2024-2569
CVE-2024-2569 affects SourceCodester Employee Task Management System 1.0, with a vulnerability in the file /admin-manage-user.php. The issue enables execution after redirect and can be exploited remotely; the exploit has been disclosed publicly. Multiple connected sources corroborate the impact a...
CVE-2024-2574
CVE-2024-2574 affects SourceCodester Employee Task Management System 1.0. The vulnerability exists in the /edit-task.php endpoint where manipulating the task_id parameter leads to an authorization bypass. Exploitation is remote and publicly disclosed per the provided documents. Multiple sources c...
CVE-2024-2575
CVE-2024-2575 concerns SourceCodester Employee Task Management System 1.0. The vulnerability affects an unknown functionality of the file /task-details.php, where manipulating the task_id parameter enables an authorization bypass. The issue is described as exploitable remotely and has had exploit...
CVE-2024-2556
The CVE-2024-2556 entry concerns SourceCodester Employee Task Management System 1.0. Affected component: attendance-info.php. Root cause: manipulation of the user_id parameter leads to an SQL injection vulnerability that can be exploited remotely. Exploit information is publicly disclosed per sou...
CVE-2024-2576
CVE-2024-2576 affects SourceCodester Employee Task Management System 1.0. The vulnerability is an authorization bypass caused by manipulating the admin_id parameter in /update-admin.php, enabling remote exploitation. Exploit details are publicly disclosed in the sources, but the provided document...
CVE-2024-2577
SourceCodester SourceCodeSter Employee Task Management System 1.0 is affected by a critical vulnerability in the /update-employee.php file. The issue stems from manipulating the admin_id parameter, causing an authorization bypass. The vulnerability is described as exploitable remotely and disclos...
CVE-2024-2554
CVE-2024-2554 affects SourceCodester Employee Task Management System 1.0, where an SQL injection is caused by manipulating the parameter admin_id in the file update-employee.php . The vulnerability is exploitable remotely and can impact confidentiality, integrity, and availability (per sources ci...
CVE-2024-33247
CVE-2024-33247 affects Sourcecodester Employee Task Management System v1.0, with a SQL injection vulnerability in the file/admin page admin-manage-user.php. The vulnerability is documented across multiple sources and targets the admin input handling, but the connected documents provide no public ...
CVE-2024-2571
The CVE-2024-2571 entry documents a vulnerability in SourceCodester Employee Task Management System 1.0 affecting unknown code in /manage-admin.php, causing execution after redirect and enabling remote exploitation. The issue is described as critical with a network attack vector and no authentica...
CVE-2024-2572
CVE-2024-2572 affects SourceCodester Employee Task Management System 1.0. The vulnerability is in /task-details.php, where processing leads to execution after redirect. It can be triggered remotely and has been disclosed publicly. Multiple sources corroborate a critical/ HIGH impact depending on ...
CVE-2024-2570
CVE-2024-2570 affects SourceCodester Employee Task Management System 1.0. The vulnerability exists in an unknown part of the file /edit-task.php, where manipulation leads to execution after redirect and can be triggered remotely. The exploit has been disclosed publicly. Red Hat and PT Security re...
CVE-2026-3751
The CVE-2026-3751 affects SourceCodester Employee Task Management System 1.0. A SQL injection exists in the GET Parameter Handler for the /daily-attendance-report.php file, triggered by manipulating the Date parameter. The vulnerability is exploitable remotely and exploits are publicly available....
CVE-2026-3752
CVE-2026-3752 affects SourceCodester’s Employee Task Management System v1.0, specifically the GET Parameter Handler in /daily-task-report.php where manipulating the Date argument triggers an SQL injection. The flaw can be exploited remotely and has been demonstrated publicly. Multiple sources (NV...