CVE-2024-28557

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-04-15

Last modified

2024-08-21

Weaknesses

CWE-89

Affected products

• Php Task Management System (Mayurik)
• Php Task Management System (Sourcecodester)

References

• https://github.com/xuanluansec/vul/blob/main/vul/2/README-SQL-2.md
• https://github.com/xuanluansec/vul/issues/2