CVE-2024-6653: code-projects Simple Task List Login loginForm.php sql injection
First published: Thu Jul 11 2024(Updated: )
A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271060.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Code-Projects Simple Task List | ||
| Code-Projects Simple Task List | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-6653?
CVE-2024-6653 has been declared as a critical vulnerability.
How does CVE-2024-6653 affect the Simple Task List application?
CVE-2024-6653 allows for SQL injection through manipulation of the username argument in the loginForm.php file.
Who is affected by CVE-2024-6653?
Users of the Code-Projects Simple Task List application version 1.0 are affected by CVE-2024-6653.
What are the potential impacts of exploiting CVE-2024-6653?
Exploiting CVE-2024-6653 could lead to unauthorized database access and manipulation of sensitive data.
How do I fix CVE-2024-6653?
To fix CVE-2024-6653, validate and sanitize the username input to prevent SQL injection vulnerabilities.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/code-projects
- canonical/code-projects simple task list
- version/code-projects simple task list/1.0