CVE-2024-3014

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file Actions.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258300.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Mar 28, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-301405.4HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result,CVE-2024-301414.7HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provi CVE-2024-301423.8HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker u CVE-2024-301434.3HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a CVE-2024-301456.1Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed application CVE-2024-301462.7Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.CVE-2024-301476.1Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.CVE-2024-301484.1Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem.CVE-2024-301496.5HCL AppScan Source <= 10.6.0 does not properly validate a TLS/SSL certificate for an executable.CVE-2024-30158.8A vulnerability classified as critical was found in SourceCodester Simple Subscription Website 1.0. Affected by this vulnerability is an unk CVE-2024-301509.1HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information dis CVE-2024-301518.3HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow u