CVE-2024-11096: code-projects Task Manager newProject.php sql injection
Published Nov 12, 2024
·Updated
A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
Code-projects Task Manager=1.0
Event History
Nov 12, 2024
CVE Published
via MITRE·12:31 AM
Data Sourced
via MITRE·12:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-11096?
CVE-2024-11096 is classified as a critical vulnerability.
2
What software is affected by CVE-2024-11096?
CVE-2024-11096 affects code-projects Task Manager version 1.0.
3
How does CVE-2024-11096 exploit occur?
CVE-2024-11096 allows for SQL injection through manipulation of the projectName argument in the /newProject.php file.
4
Can CVE-2024-11096 be exploited remotely?
Yes, CVE-2024-11096 can be exploited remotely.
5
How do I fix CVE-2024-11096?
To fix CVE-2024-11096, you should update code-projects Task Manager to the latest version that addresses this vulnerability.