Vulnerabilities

TI-2024-18819 CVE-2024-28276 · GHSA-8cj3-cf5p-99vq

Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task.php?task_name=.

LOW 27

Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task.php?task_name=.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00286 Published 2024-05-13 No fix listed CWE-79

TI-2024-17450 CVE-2024-26517 · GHSA-h37j-8pp8-r22g

SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to…

MEDIUM 49

SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00802 Published 2024-05-08 No fix listed CWE-79

TI-2024-16020 CVE-2024-24142 · GHSA-c6w6-rrgw-p384

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.

HIGH 82

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01101 Published 2024-02-13 No fix listed CWE-89

Vulnerabilities

Filters

Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task.php?task_name=.

SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to…

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.