VendorsSimple Task Managing System Projectsimple_task_managing_systemall versions
Vulnerabilities

Simple Task Managing System Project Simple Task Managing System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2022-40032
SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.
Published 2023-02-17 · Modified
9.81 PoCEPSS 0.207
CVE-2022-40030
SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php.
Published 2022-09-21 · Modified
9.8EPSS 0.014
CVE-2022-3013
SourceCodester Simple Task Managing System loginVaLidation.php sql injection
Published 2022-08-27 · Modified
9.8EPSS 0.005
CVE-2022-40026
SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php.
Published 2022-09-21 · Modified
7.2EPSS 0.009
CVE-2022-40027
SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.
Published 2022-09-21 · Modified
6.1EPSS 0.007
CVE-2022-3014
SourceCodester Simple Task Managing System cross site scripting
Published 2022-08-27 · Modified
6.1EPSS 0.006
CVE-2022-40028
SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter.
Published 2022-09-21 · Modified
4.8EPSS 0.006
CVE-2022-40029
SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.
Published 2022-09-21 · Modified
4.8EPSS 0.006