CVE-2026-19342
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A vulnerability in code-projects Task Management System 1.0 in the Login component of /index.php allows improper authentication via manipulation of the Password argument. The attack can be performed remotely. The exploit is public.
Risk Assessment
An attacker can log in without a valid password, potentially leading to unauthorized access to the system and data.
Recommendation
Apply patches or update the system. Strengthen authentication mechanisms, e.g., by introducing login attempt limits.
Other vulnerabilities in code-projects Task Management System
See all- CVE-2026-19345Medium
A missing authorization vulnerability exists in code-projects Task Management System 1.0 in /user/UpdateTaskStatus.php. Manipulating task_id/val arguments leads to missing authorization. The attack can be launched remotely. The exploit is public.
- CVE-2026-19344High
A SQL injection vulnerability exists in code-projects Task Management System 1.0 in /user/comment_count_user.php. Manipulating the task_id argument allows remote SQL queries. The exploit is public.
- CVE-2026-19343High
A SQL injection vulnerability exists in code-projects Task Management System 1.0 in /admin/AdminLogin.php. Manipulating email/password arguments allows remote SQL queries. The exploit is public.
Original NVD description (English source)
A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The exploit is now public and may be used.