Medium severity5.5NVD Advisory· Published Sep 15, 2023· Updated Jun 17, 2026
CVE-2023-4987
CVE-2023-4987
Description
A vulnerability, which was classified as critical, has been found in infinitietech taskhub 2.8.7. Affected by this issue is some unknown functionality of the file /home/get_tasks_list of the component GET Parameter Handler. The manipulation of the argument project/status/user_id/sort/search leads to sql injection. VDB-239798 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
3cpe:2.3:a:infinitietech:taskhub:2.8.7:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:infinitietech:taskhub:2.8.7:*:*:*:*:*:*:*
- (no CPE)range: <=2.8.7
- (no CPE)range: 2.8.7
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/174760/Taskhub-2.8.7-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party Advisory
- vuldb.comnvdThird Party Advisory
News mentions
0No linked articles in our index yet.