SQL Injection Vulnerability in SourceCodester Task Progress Tracker

CVE-2024-7792

What is CVE-2024-7792?

A serious SQL injection vulnerability has been identified in SourceCodester Task Progress Tracker version 1.0, specifically within the /endpoint/delete-task.php file. This vulnerability allows remote attackers to manipulate the 'task' parameter, potentially leading to unauthorized access and database exploitation. With the exploit now public, it poses a significant risk to users running the affected version. It is crucial for organizations utilizing this software to implement immediate protective measures, including updates or mitigations, to avert potential data breaches and maintain their security posture.

References