This vulnerability affects code-projects Task Management System 1.0. An attacker can manipulate the Password parameter in the Login component's /index.php file to bypass authentication improperly. The vulnerability is remotely exploitable without any privileges or user interaction. The CVSS 4.0 base score is 6.9, reflecting medium severity with network attack vector, low complexity, and no privileges required. No official patch or remediation guidance is currently available from the vendor or authoritative sources.

Successful exploitation allows an attacker to bypass authentication controls remotely, potentially gaining unauthorized access to the system. This could lead to unauthorized actions within the Task Management System, depending on the privileges granted post-authentication. No information is provided about privilege escalation or data confidentiality/integrity impacts beyond authentication bypass.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected system, implementing additional authentication layers, or monitoring for exploitation attempts. Avoid relying solely on the vulnerable authentication mechanism.