CVE-2024-24142

CVE-2024-24142 affects Sourcecodester School Task Manager 1.0. The issue is a SQL Injection in the GET parameter subject , caused by insufficient input handling. Impact is high (Confidentiality/Integrity/Availability) with CVSS v3.1 base score of 9.8 (NETWORK, LOW access complexity, NONE privileg...

CVE-2024-28276

The Sourcecodester School Task Manager 1.0 software is vulnerable to Cross-Site Scripting (XSS) . The vulnerability exists in the add-task.php endpoint, specifically via the task_name parameter, which allows for the injection of malicious scripts. This flaw is categorized under CWE-79 (Improper N...

CVE-2024-26517

A SQL Injection vulnerability exists in School Task Manager v.1.0 within the delete-task.php component. This flaw allows a remote attacker to execute crafted payloads to obtain sensitive information and gain unauthorized access to data. As a mitigation, it is recommended to temporarily disable th...