CVE-2024-28557

CRITICAL

Mayurik Php Task Management System - SQL Injection

Title source: rule
STIX 2.1

Description

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0426
EPSS Percentile 88.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
mayurik/php_task_management_system 1.0
Published Apr 15, 2024
Tracked Since Feb 18, 2026