cve/2024/CVE-2024-28557.md

CVE-2024-28557

Description

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php.

POC

Reference

• https://github.com/xuanluansec/vul/issues/2
• https://github.com/xuanluansec/vul/issues/2

Github

No PoCs found on GitHub currently.