VULNERABILITY INTELLIGENCE

CVE-2024-28557

CVSS score9.8 CRITICAL

EPSS probability1.23%

CISA KEVNot currently listed

Published2024-04-15

Last modified2026-06-17

Description

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php.