CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-1791 – SourceCodester Simple Task Allocation System manage_user.php sql injection
https://notcve.org/view.php?id=CVE-2023-1791
A vulnerability has been found in SourceCodester Simple Task Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/SQLcve.md https://vuldb.com/?ctiid.224743 https://vuldb.com/?id.224743 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-1790 – SourceCodester Simple Task Allocation System index.php information disclosure
https://notcve.org/view.php?id=CVE-2023-1790
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/uploadcve.md https://vuldb.com/?ctiid.224724 https://vuldb.com/?id.224724 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •