CVE-2024-28557

2024-04-1500:00:00

mitre

github.com

cve-2024-28557

sourcecodester

sql injection

remote attack

arbitrary code

privilege escalation

sensitive information

update-admin.php

AI Score

8.5

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:sourcecodester:php_task_management_system:1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "sourcecodester",
    "product": "php_task_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]