CVE-2026-19343
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A SQL injection vulnerability exists in code-projects Task Management System 1.0 in /admin/AdminLogin.php. Manipulating email/password arguments allows remote SQL queries. The exploit is public.
Risk Assessment
An attacker can bypass authentication and gain access to the admin panel, potentially leading to full system compromise.
Recommendation
Apply patches or update the system. Use parameterized queries and strong authentication.
Other vulnerabilities in code-projects Task Management System
See all- CVE-2026-19345Medium
A missing authorization vulnerability exists in code-projects Task Management System 1.0 in /user/UpdateTaskStatus.php. Manipulating task_id/val arguments leads to missing authorization. The attack can be launched remotely. The exploit is public.
- CVE-2026-19344High
A SQL injection vulnerability exists in code-projects Task Management System 1.0 in /user/comment_count_user.php. Manipulating the task_id argument allows remote SQL queries. The exploit is public.
- CVE-2026-19342High
A vulnerability in code-projects Task Management System 1.0 in the Login component of /index.php allows improper authentication via manipulation of the Password argument. The attack can be performed remotely. The exploit is public.
Original NVD description (English source)
A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.