CVE-2023-4987

A vulnerability, which was classified as critical, has been found in infinitietech taskhub 2.8.7. Affected by this issue is some unknown functionality of the file /home/get_tasks_list of the component GET Parameter Handler. The manipulation of the argument project/status/user_id/sort/search leads to sql injection. VDB-239798 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• http://packetstormsecurity.com/files/174760/Taskhub-2.8.7-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.239798Third Party Advisory
• https://vuldb.com/?id.239798Third Party Advisory
• http://packetstormsecurity.com/files/174760/Taskhub-2.8.7-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.239798Third Party Advisory
• https://vuldb.com/?id.239798Third Party Advisory

Published

Sep 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49860Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2023-49861Missing Authorization vulnerability in socialmediafeather So…4.3
• CVE-2023-49862An information disclosure vulnerability exists in the aVideo…6.5
• CVE-2023-49863An information disclosure vulnerability exists in the aVideo…6.5
• CVE-2023-49864An information disclosure vulnerability exists in the aVideo…6.5
• CVE-2023-49867A stack-based buffer overflow vulnerability exists in the bo…7.2
• CVE-2023-49870Rejected reason: This is unused.
• CVE-2023-49872Rejected reason: This is unused.
• CVE-2023-49874Mattermost fails to check whether a user is a guest when upd…4.3
• CVE-2023-49877IBM System Storage Virtualization Engine TS7700 3957-VEC, 39…4.3
• CVE-2023-49878IBM System Storage Virtualization Engine TS7700 3957-VEC, 39…4.3
• CVE-2023-4988A vulnerability, which was classified as problematic, was fo…9.8