← Database

CVE-2022-40032

CRITICAL CVSS: 9.8 Published: 2023-02-17 Modified: 2026-06-17

Description

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.

Affected Platforms

Simple Task Managing System Project Simple Task Managing System

Weakness Type

CWE-89, CWE-89

References