Simple Task Managing System vulnerabilities
4 known CVE vulnerabilities in Simple Task Managing System, translated and rated.
- CVE-2022-40030Critical
SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php. An attacker can manipulate this parameter to execute unauthorized database queries.
- CVE-2022-40029Medium
A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 in the newProjectValidation.php component. Attackers can inject arbitrary web scripts or HTML via the shortName parameter.
- CVE-2022-40028Medium
A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 in the newProjectValidation.php file. Attackers can inject arbitrary web scripts or HTML via the fullName parameter.
- CVE-2022-40027Medium
A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 via the newTask.php component. Attackers can inject arbitrary web scripts or HTML through the shortName parameter.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS