Remyandrade Daily Habit Tracker vulnerabilities

5 vulnerabilities

Known vulnerabilities in Remyandrade Daily Habit Tracker, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2024-2075remyandradedaily_habit_tracker+1
EPSS score
0.54%
A vulnerability was found in SourceCodester Daily Habit Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/update-tracker.php. The manipulation of the argument day leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255391.7.2CVE-2024-24140remyandradedaily_habit_tracker
EPSS score
1.16%
Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.'9.8CVE-2024-24495remyandradedaily_habit_tracker
EPSS score
1.33%
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request.9.8CVE-2024-24496remyandradedaily_habit_tracker
EPSS score
19.50%
An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components.6.1CVE-2024-24494remyandradedaily_habit_tracker
EPSS score
25.88%
Cross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via the day, exercise, pray, read_book, vitamins, laundry, alcohol and meat parameters in the add-tracker.php and update-tracker.php components.