CVE-2024-28556

CWE-89 — SQL Injection3 documents3 sources
Severity
9.8CRITICAL
EPSS
4.4%
top 11.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mayurik PHP Task Management System
Timeline
PublishedApr 15

Description

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2024-28556: SQL Injection vulnerability in Sourcecodester php task management system v1↗2024-04-15
▶
GHSA
GHSA-wqhj-p438-8c8f: SQL Injection vulnerability in Sourcecodester php task management system v1↗2024-04-15
▶
CVE-2024-28556 (CRITICAL CVSS 9.8) | SQL Injection vulnerability in Sour | cvebase.io