Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:simple_to-do_list_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductSimple To Do List System (b40ba978-81d3-5128-94b6-a8dff5d41c03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4248 vulnerable 2026-06-08 07:29:15.923718 SourceCodester Simple To-Do List System complete_task.php sql injection
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /complete_task.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-04T06:00:08.873Z
Updated: 2025-05-05T14:48:41.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4247 vulnerable 2026-06-08 07:29:15.922363 SourceCodester Simple To-Do List System delete_task.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /delete_task.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-04T04:31:04.835Z
Updated: 2025-05-05T14:49:39.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10117 vulnerable 2026-06-08 07:02:26.326894 SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting
LOW (3.5)
A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input <script>alert('XSS')</script> can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-09-09T01:02:10.703Z
Updated: 2025-09-09T19:23:08.178Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.