CVE-2024-1199

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability has been found in CodeAstro Employee Task Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file \employee-tasks-php\attendance-info.php. The manipulation of the argument aten_id leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252697 was assigned to this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404

Affected software

Vendor	Product	Versions
CodeAstro	Employee Task Management System	1.0

References

https://docs.qq.com/doc/DYnhIWEdkZXViTXdDPermissions Required
https://vuldb.com/?ctiid.252697Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.252697Third Party Advisory, VDB Entry
https://docs.qq.com/doc/DYnhIWEdkZXViTXdDPermissions Required
https://vuldb.com/?ctiid.252697Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.252697Third Party Advisory, VDB Entry

Timeline

Published: Feb 3, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-119904.6A Cross-Site Scripting (XSS) vulnerability in SurgeMail v78c2 could allow an attacker to execute arbitrary JavaScript code via an elaborate CVE-2024-119916.5Motoko's incremental garbage collector is impacted by an uninitialized memory access bug, caused by incorrect use of write barriers in a few CVE-2024-119929.1Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to bypass the intended r CVE-2024-119936.1Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.38, and Liferay DXP 7.4 GA through update 38 allows CVE-2024-119945.7APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document CVE-2024-119956.1A vulnerability has been found in code-projects Farmacia 1.0 and classified as problematic. Affected by this vulnerability is an unknown fun CVE-2024-119965.4A vulnerability was found in code-projects Farmacia 1.0 and classified as problematic. Affected by this issue is some unknown functionality CVE-2024-119975.4A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown part of the file /ve CVE-2024-119987.5A vulnerability was found in code-projects Farmacia 1.0. It has been declared as critical. This vulnerability affects unknown code of the fi CVE-2024-119998.8CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authentica CVE-2024-12006.5A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file CVE-2024-120005.4A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processi