PT-2023-32348 · Unknown · Sourcecodester Task Reminder System
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Task Reminder System version 1.0
Description
A critical issue has been found, affecting an unknown part of the file /classes/Master.php?f=save reminder. The manipulation of the
id argument leads to SQL injection. This issue can be exploited remotely.Recommendations
For SourceCodester Task Reminder System version 1.0, consider restricting access to the /classes/Master.php file or the
save reminder function to minimize the risk of exploitation. Avoid using the id argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sourcecodester Task Reminder System