CVE-2024-3225: A vulnerability was found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit-task.php. The manipulati...

Summary

A vulnerability was found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit-task.php. The manipulation of the argument task_id leads to sql injection. The attack may be launched remotely. The exploit has...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
mayurik	php_task_management_system	1.0 `cpe:2.3:a:mayurik:php_task_management_system:1.0:::::::*`

Original advisory text

A vulnerability was found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit-task.php. The manipulati...

A vulnerability was found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit-task.php. The manipulation of the argument task_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259070 is the identifier assigned to this vulnerability.

References

https://github.com/E1CHO/cve_hub/blob/main/php%20task%20management%20system/php%... Exploit Third Party Advisory
https://vuldb.com/?ctiid.259070 Permissions Required VDB Entry
https://vuldb.com/?id.259070 Third Party Advisory VDB Entry
https://vuldb.com/?submit.308642 Third Party Advisory VDB Entry