CVE-2024-3465

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected is the function laporan_filter of the file /application/controller/Transaki.php. The manipulation of the argument dari/sampai leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-259746 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Laundry Management System	1.0
sourcecodester	laundry_management_system	1.0

References

https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL3.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.259746Permissions Required
https://vuldb.com/?id.259746Third Party Advisory, VDB Entry
https://vuldb.com/?submit.312313Third Party Advisory, VDB Entry
https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL3.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.259746Permissions Required
https://vuldb.com/?id.259746Third Party Advisory, VDB Entry
https://vuldb.com/?submit.312313Third Party Advisory, VDB Entry

Timeline

Published: Apr 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-346503.3Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Ed CVE-2024-346515.5Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files.CVE-2024-346523.3Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance incl CVE-2024-346534.6Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege.CVE-2024-346545.5Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My CVE-2024-346555.5Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged AP CVE-2024-346567.8Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.CVE-2024-346579.8Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code.CVE-2024-346587.1Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR.CVE-2024-346595.3Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group.CVE-2024-34668.8A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by this vulnerability CVE-2024-346607.8Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.