CVE-2024-28613

https://notcve.org/view.php?id=CVE-2024-28613

24 Apr 2024 — SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the task_id parameter of the task-details.php, and edit-task.php component. Vulnerabilidad de inyección SQL en PHP Task Management System v.1.0 permite a un atacante remoto escalar privilegios y obtener información confidencial a través del parámetro task_id del componente task-details.php y edit-task.php. • https://github.com/hakkitoklu/hunt/blob/main/PHP%20Task%20Management%20System/sqli.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •