CVE-2024-28557

Summary

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/xuanluansec/vul/blob/main/vul/2/README-SQL-2.md
• https://github.com/xuanluansec/vul/issues/2

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/xuanluansec/vul/blob/main/vul/2/README-SQL-2.md
• https://github.com/xuanluansec/vul/issues/2

• ←Previous
• Next→