Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2023-0904

CWE-89 — SQL Injection4 documents4 sources
Severity
8.8HIGH
EPSS
0.4%
top 40.63%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Sourcecodester Employee Task Management SystemEmployee Task Management System Project Employee Task Management System
Timeline
PublishedFeb 18
Latest updateApr 6

Description

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument task_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221453 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Employee Task Management System task-details.php sql injection↗2023-02-18
▶
GHSA
GHSA-2wwc-hfmq-5q7x: A vulnerability was found in SourceCodester Employee Task Management System 1↗2023-02-18
▶

💥Exploits & PoCs

1
Exploit-DB
Employee Task Management System v1.0 - SQL Injection on (task-details.php?task_id=?)↗2023-04-06
▶
CVE-2023-0904 (HIGH CVSS 8.8) | A vulnerability was found in Source | cvebase.io