Approved changes feed: RSS · Atom

cpe:2.3:a:rems:task_progress_tracker:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorRems (50adb61c-3ff7-5843-b658-0384e3b41921)
ProductTask Progress Tracker (094821c3-b7f6-5e69-bb94-531cc58307cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8140 vulnerable 2026-06-03 14:58:17.212734 SourceCodester Task Progress Tracker update-task.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Task Progress Tracker 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file update-task.php. The manipulation of the argument task_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-25T01:31:05.012Z
Updated: 2024-08-26T15:46:37.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7793 vulnerable 2026-06-03 14:58:07.186835 SourceCodester Task Progress Tracker add-task.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument task_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T21:00:06.947Z
Updated: 2024-08-19T18:41:23.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7792 vulnerable 2026-06-03 14:58:07.185952 SourceCodester Task Progress Tracker delete-task.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoint/delete-task.php. The manipulation of the argument task leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T18:31:04.492Z
Updated: 2024-08-14T19:38:23.748Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.