CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2935 – SourceCodester Todo List in Kanban Board Add ToDo cross site scripting
https://notcve.org/view.php?id=CVE-2024-2935
A vulnerability, which was classified as problematic, has been found in SourceCodester Todo List in Kanban Board 1.0. Affected by this issue is some unknown functionality of the component Add ToDo. The manipulation of the argument Todo leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/To%20Do%20List%20App/To%20Do%20List%20App%20-%20Cross-Site-Scripting.md https://vuldb.com/?ctiid.258014 https://vuldb.com/?id.258014 https://vuldb.com/?submit.304678 https://www.sourcecodester.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2934 – SourceCodester Todo List in Kanban Board delete-todo.php sql injection
https://notcve.org/view.php?id=CVE-2024-2934
A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-todo.php. The manipulation of the argument list leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/To%20Do%20List%20App/To%20Do%20List%20App%20-%20SQL%20Injection.md https://vuldb.com/?ctiid.258013 https://vuldb.com/?id.258013 https://vuldb.com/?submit.304677 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •