Vendors / Simple Task Managing System Project Simple Task Managing System Project Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Simple Task Managing System Project records in CISA KEV No Simple Task Managing System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20693 · Published 2023-02-17 · No fix listed CWE-89
Priority MEDIUM 60
A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.006 · Published 2022-08-27 · No fix listed CWE-79
Priority MEDIUM 52
SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01482 · Published 2022-09-21 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00552 · Published 2022-08-27 · No fix listed CWE-89
Priority LOW 35
SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00883 · Published 2022-09-21 · No fix listed CWE-89
Priority LOW 28
SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newTask.php.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00704 · Published 2022-09-21 · No fix listed CWE-79
Priority LOW 23
SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00574 · Published 2022-09-21 · No fix listed CWE-79
Priority LOW 23
SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00574 · Published 2022-09-21 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical3 High1 Medium4 Low0 No CVSS0