CyberRota Analysis
AI-GeneratedA SQL injection vulnerability exists in the Login Form component of the Task Management System 1.0, specifically within the Operation::select_with_multiple_condition function in the /index.php file. This flaw allows remote attackers to manipulate the email argument, potentially compromising the database and exposing sensitive information. Organizations using this system should prioritize patching or mitigating this vulnerability due to its high severity and the availability of public exploits.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.