Description
WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| luiswang | WebTareas | 2.4 | — |
References
- ExploitDB-51087 exploit
- WebTareas Project Homepage product
- VulnCheck Advisory: WebTareas 2.4 Unauthenticated SQL Injection via Session Cookie Parameter third-party-advisory