SQL Injection Vulnerability in SourceCodester Simple Subscription Website
CVE-2024-4093

8.8HIGH

Key Information:

Vendor

SourceCodester
Status
Simple Subscription Website
Vendor
CVE Published:
24 April 2024

What is CVE-2024-4093?

A serious security flaw exists in the Simple Subscription Website 1.0 developed by SourceCodester, specifically within the view_application.php file. This vulnerability enables an attacker to execute SQL injection through improper handling of the 'id' parameter. By exploiting this weakness, malicious users could execute arbitrary SQL queries on the database, potentially leading to data breaches, unauthorized access, or data manipulation. The vulnerability is publicly disclosed, which highlights the urgent need for users and administrators to apply patches or implement security measures promptly to protect their systems from exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://vuldb.com/?id.261822
https://vuldb.com/?ctiid.261822
https://vuldb.com/?submit.321505

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.