Daily Habit Tracker vulnerabilities

2 known vulnerabilities in Daily Habit Tracker from Remyandrade. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  daily_habit_tracker: Improper Authentication

  CVE-2024-24496Feb 8, 2024RemyandradeEPSS 19.5%

  An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components.

• 9.8 Critical severity

  Daily Habit Tracker: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-24495Feb 8, 2024RemyandradeEPSS 1.33%

  SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request.