Approved changes feed: RSS · Atom
cpe:2.3:a:infinitietech:taskhub:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Infinitietech (d7f9f3fe-9668-5312-9962-4bcbfb759b78) |
|---|---|
| Product | Taskhub (1b438559-90e1-5d8d-b9cb-8da90bd083be) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4987 |
vulnerable | 2026-06-08 06:16:15.480819 |
infinitietech taskhub GET Parameter get_tasks_list sql injection
MEDIUM (5.5)
A vulnerability, which was classified as critical, has been found in infinitietech taskhub 2.8.7. Affected by this issue is some unknown functionality of the file /home/get_tasks_list of the component GET Parameter Handler. The manipulation of the argument project/status/user_id/sort/search leads to sql injection. VDB-239798 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-09-15T14:31:05.555Z
Updated: 2024-09-25T15:14:30.250Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.