CVE-2024-2572

HIGH

SourceCodester Employee Task Management System 1.0 - Code Injection

Title source: llm

Description

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /task-details.php. The manipulation leads to execution after redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257075.

Scores

CVSS v3 7.3
EPSS 0.0011
EPSS Percentile 29.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-698
Status published

Affected Products (1)

oretnom23/employee_task_management_system

Timeline

Published Mar 18, 2024
Tracked Since Feb 18, 2026