PT-2024-21413 · Unknown · School Task Manager
CVE-2024-26517
·
Published
2024-02-26
·
Updated
2025-06-18
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
School Task Manager version 1.0
Description
A SQL Injection issue allows a remote attacker to obtain sensitive information via a crafted payload to the "delete-task.php" component. This enables unauthorized access to data.
Recommendations
For School Task Manager version 1.0, consider temporarily disabling the delete-task.php component until a patch is available to prevent exploitation. Additionally, investigate the scope of the issue, check for any unauthorized access, and notify relevant stakeholders.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
School Task Manager