Rainless100792

**Name of the Vulnerable Software and Affected Versions** code-projects Task Management System version 1.0 **Description** An improper authentication issue exists within the Login component in the `/index.php` file. A remote attacker can bypass authentication by manipulating the `Password` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Task Management System version 1.0 **Description** A remote SQL injection exists in the `/admin/AdminLogin.php` endpoint. This issue occurs when the `email` and `password` variables are manipulated, allowing an attacker to execute unauthorized database queries. **Recommendations** As a temporary workaround, restrict access to the `/admin/AdminLogin.php` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Task Management System version 1.0 **Description** Remote SQL injection is possible through the manipulation of the `task id` variable within the '/user/comment count user.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to interfere with the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Task Management System version 1.0 **Description** An authorization bypass exists in the `/user/UpdateTaskStatus.php` endpoint. A remote attacker can exploit this by manipulating the `task id/val` argument, allowing unauthorized actions to be performed. **Recommendations** Restrict access to the `/user/UpdateTaskStatus.php` endpoint until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Task Management System version 1.0 **Description** An issue exists in the processing of the '/user/CommentSave.php' endpoint. Remote attackers can trigger cross site scripting (XSS)—a technique used to inject malicious scripts into web pages viewed by other users—by manipulating the `comment`, `task id`, `mineId`, `recId`, `myName`, or `myImage` arguments. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.