CVE-2026-75778

Publié : 18 août 2026

Modifié : 18 août 2026

Score CVSS

7.3

HIGH

Description détaillée

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://code-projects.org/https://github.com/niaoniaollll/cve/issues/5 https://vuldb.com/cve/CVE-2026-75778 https://vuldb.com/submit/877771 https://vuldb.com/vuln/391521 https://vuldb.com/vuln/391521/cti

Dernières Vulnérabilités

CVE-2026-73692

Dolibarr contains an authorization bypass vulnerability in the clonetasks mass action that allows authenticated users with project creation permissions to clone tasks into private projects they are not authorized to access. An inverted boolean condition in the private-project membership check within actions_massactions.inc.php causes the authorization flag to be set for unauthorized users, allowing attackers to supply a user-controlled projectid POST parameter to create task records in any private project.

VOIR DÉTAILS

CVE-2026-50575

BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are available.

VOIR DÉTAILS

CVE-2026-32468

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.

VOIR DÉTAILS