Simple Task Managing System vulnerabilities
4 known CVE vulnerabilities in Simple Task Managing System, translated and rated.
- CVE-2022-40030Critical
SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php. An attacker can manipulate this parameter to execute unauthorized database queries.
- CVE-2022-40029Medium
A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 in the newProjectValidation.php component. Attackers can inject arbitrary web scripts or HTML via the shortName parameter.
- CVE-2022-40028Medium
A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 in the newProjectValidation.php file. Attackers can inject arbitrary web scripts or HTML via the fullName parameter.
- CVE-2022-40027Medium
A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 via the newTask.php component. Attackers can inject arbitrary web scripts or HTML through the shortName parameter.