SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component.
References
Configurations
History
18 Jun 2025, 14:32
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/unrealjbr/CVE-2024-26517 - Broken Link | |
References | () https://www.sourcecodester.com/php/16877/school-task-manager-using-php-source-code.html - Product | |
First Time |
Rems
Rems school Task Manager |
|
CPE | cpe:2.3:a:rems:school_task_manager:1.0:*:*:*:*:*:*:* |
21 Nov 2024, 09:02
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/unrealjbr/CVE-2024-26517 - | |
References | () https://www.sourcecodester.com/php/16877/school-task-manager-using-php-source-code.html - |
05 Nov 2024, 19:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-79 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
14 May 2024, 16:13
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-14 15:09
Updated : 2025-06-18 14:32
NVD link : CVE-2024-26517
Mitre link : CVE-2024-26517
CVE.ORG link : CVE-2024-26517
JSON object : View
Products Affected
rems
- school_task_manager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')