CVE-2023-5836

CVE-2023-5836 affects SourceCodester Task Reminder System 1.0. The vulnerability is a SQL injection in the file classes/Users.php?f=delete caused by manipulation of the id argument. Impact is rated High for confidentiality, integrity, and availability (per CVSS) and the attack can be launched rem...

CVE-2023-2217

SourceCodester Task Reminder System 1.0 is affected by a SQL injection in /admin/reminders/manage_reminder.php via the id parameter. The vulnerability can be exploited remotely, with public disclosures noted in multiple sources (e.g., NVD, Red Hat, PRION, Vulners enrichment). Several connected do...

CVE-2023-2218

CVE-2023-2218 affects SourceCodester Task Reminder System 1.0, with a vulnerability in the file /admin/user/manage_user.php where the argument id is susceptible to SQL injection. The issue is exploitable remotely and, according to the sources, the exploit has been disclosed publicly. There is no ...

CVE-2023-2219

SourceCodester Task Reminder System v1.0 contains a cross-site scripting (XSS) vulnerability in the /classes/Users.php file, triggered by manipulating the id parameter. The issue is remote in nature and has been publicly disclosed. Practical guidance across connected sources recommends disabling ...

CVE-2023-2150

SourceCodester Task Reminder System 1.0 is affected. The vulnerability lies in Master.php where manipulation of the id parameter enables SQL injection, potentially exploitable remotely. Multiple sources indicate a confirmed, critical issue (CVE-2023-2150) with exploitation disclosed publicly; how...

CVE-2023-2154

SourceCodester Task Reminder System 1.0 contains a SQL injection in the admin endpoint /admin/?page=reminders/view_reminder, exploitable via the id parameter. The vulnerability enables remote exploitation with impact on confidentiality, integrity, and availability as noted in CVSS metrics. No exp...

CVE-2023-31705

CVE-2023-31705 is a Reflected Cross-site Scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0. The issue allows an authenticated user to inject malicious JavaScript via the page parameter, indicating that input handling for that parameter is vulnerable to reflected XSS. The at...