SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the task_id parameter of the task-details.php, and edit-task.php component.
Product
mayurik php task management system vulnerabilities
11 published CVES affecting mayurik php task management system, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 11
- Critical
- 4
- High
- 6
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest mayurik php task management system CVEs
Newest publication first
-
CriticalCVSS 9.8 EPSS 0.63%
-
CriticalCVSS 9.8 EPSS 1.2%
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php.
-
CriticalCVSS 9.8 EPSS 1.2%
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php.
-
MediumCVSS 6.5 EPSS 0.57%
A vulnerability was found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit-task.php. The manipulation of the argument task_id leads to sql injection. The attack may be launched remot...
-
HighCVSS 8.8 EPSS 0.71%
A vulnerability has been found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file task-details.php. The manipulation of the argument task_id leads to sql injection. The attack can be...
-
CVE-2024-3223 SourceCodester PHP Task Management System admin-manage-user.php sql injection
PublishedHighCVSS 8.8 EPSS 0.67%A vulnerability, which was classified as critical, was found in SourceCodester PHP Task Management System 1.0. Affected is an unknown function of the file admin-manage-user.php. The manipulation of the argument admin_id leads to sql injection. It is possible to launch the attack...
-
CVE-2024-3222 SourceCodester PHP Task Management System admin-password-change.php sql injection
PublishedHighCVSS 8.8 EPSS 0.67%A vulnerability, which was classified as critical, has been found in SourceCodester PHP Task Management System 1.0. This issue affects some unknown processing of the file admin-password-change.php. The manipulation of the argument admin_id leads to sql injection. The attack may b...
-
HighCVSS 8.8 EPSS 0.67%
A vulnerability classified as critical was found in SourceCodester PHP Task Management System 1.0. This vulnerability affects unknown code of the file attendance-info.php. The manipulation of the argument user_id leads to sql injection. The attack can be initiated remotely. The e...
-
CriticalCVSS 9.8 EPSS 0.93%
The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection
-
HighCVSS 7.5 EPSS 0.79%
SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php.
-
HighCVSS 7.5 EPSS 0.85%
SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin_id=
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.