Description
A vulnerability was found in itsourcecode Simple Task List 1.0. It has been classified as critical. This affects the function insertUserRecord of the file signUp.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271707.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| itsourcecode | Simple Task List | 1.0 |
| itsourcecode | simple_task_list | 1.0 |
References
- https://github.com/qianqiusujiu/cve/issues/1Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.271707Permissions Required
- https://vuldb.com/?id.271707Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.375154Third Party Advisory, VDB Entry
- https://github.com/qianqiusujiu/cve/issues/1Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.271707Permissions Required
- https://vuldb.com/?id.271707Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.375154Third Party Advisory, VDB Entry
Timeline
- Published
- Jul 17, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified