CVE-2024-4093

CWE-89SQL Injection3 documents3 sources
Severity
8.8HIGH
EPSS
0.1%
top 80.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 24

Description

A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file view_application.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-261822 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

🔴Vulnerability Details

2
CVEList
SourceCodester Simple Subscription Website view_application.php sql injection2024-04-24
GHSA
GHSA-9r85-wp9w-jjwp: A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 12024-04-24
CVE-2024-4093 (HIGH CVSS 8.8) | A vulnerability | cvebase.io