CVE-2024-28556: SQL Injection

Published Apr 15, 2024

Updated

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php.

Affected Software

2 affected components

Sourcecodester PHP Task Management System

Mayurik Php Task Management System=1.0

Event History

Apr 15, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-28556?

CVE-2024-28556 has a high severity due to its potential for remote code execution and privilege escalation.

How do I fix CVE-2024-28556?

To fix CVE-2024-28556, update the Sourcecodester PHP task management system to the latest version and ensure proper input validation.

Who is affected by CVE-2024-28556?

Users of Sourcecodester PHP task management system version 1.0 are affected by CVE-2024-28556.

What kind of attack does CVE-2024-28556 facilitate?

CVE-2024-28556 facilitates SQL Injection attacks that allow attackers to execute arbitrary code.

Is CVE-2024-28556 easy to exploit?

CVE-2024-28556 can be easily exploited using crafted payloads directed at vulnerable endpoints.