CVE-2024-3224: SourceCodester PHP Task Management System task-details.php sql injection

Published Apr 3, 2024

Updated

A vulnerability has been found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259069 was assigned to this vulnerability.

Affected Software

2 affected components

Sourcecodester PHP Task Management System

Mayurik Php Task Management System=1.0

Event History

Apr 3, 2024

CVE Published

via MITRE·01:31 AM

Data Sourced

via MITRE·01:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Jan 25, 57107

Event

via NVD·08:36 PM

Frequently Asked Questions

What is the severity of CVE-2024-3224?

CVE-2024-3224 is classified as a critical vulnerability.

How does CVE-2024-3224 affect the SourceCodester PHP Task Management System?

CVE-2024-3224 affects the task-details.php file, allowing for SQL injection through manipulated task_id arguments.

What systems are vulnerable to CVE-2024-3224?

The vulnerability CVE-2024-3224 affects SourceCodester PHP Task Management System version 1.0.

How do I fix CVE-2024-3224?

To fix CVE-2024-3224, validate and sanitize user inputs in task_id to prevent SQL injection.

Can CVE-2024-3224 be exploited remotely?

Yes, CVE-2024-3224 can be exploited remotely, as it involves SQL injection vulnerabilities.