A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoint/delete-task.php. The manipulation of the argument task leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.274560 | Permissions Required VDB Entry |
| https://vuldb.com/?ctiid.274560 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.389360 | Third Party Advisory VDB Entry |
| https://github.com/joinia/webray.com.cn/blob/main/Task-Progress-Tracker/Task-Progress-Trackersql.md | Exploit Third Party Advisory |
Configurations
History
20 Aug 2024, 19:08
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | () https://vuldb.com/?submit.389360 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.274560 - Permissions Required, VDB Entry | |
| References | () https://github.com/joinia/webray.com.cn/blob/main/Task-Progress-Tracker/Task-Progress-Trackersql.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.274560 - Permissions Required, VDB Entry | |
| First Time |
Rems task Progress Tracker
Rems |
|
| CPE | cpe:2.3:a:rems:task_progress_tracker:1.0:*:*:*:*:*:*:* |
14 Aug 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-14 19:15
Updated : 2024-08-20 19:08
NVD link : CVE-2024-7792
Mitre link : CVE-2024-7792
JSON object : View
Products Affected
rems
- task_progress_tracker
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')