CVE-2024-2265

A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.sql. The manipulation leads to inclusion of sensitive information in source code. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256035. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-540

• https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20publicly%20exposed%20password%20hashes.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.256035Permissions Required
• https://vuldb.com/?id.256035Third Party Advisory
• https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20publicly%20exposed%20password%20hashes.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.256035Permissions Required
• https://vuldb.com/?id.256035Third Party Advisory

Published

Mar 7, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22640TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expres…7.5
• CVE-2024-22641TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regul…7.5
• CVE-2024-22643A Cross-Site Request Forgery (CSRF) vulnerability in SEO Pan…6.5
• CVE-2024-22646An email address enumeration vulnerability exists in the pas…5.3
• CVE-2024-22647An user enumeration vulnerability was found in SEO Panel 4.1…5.3
• CVE-2024-22648A Blind SSRF vulnerability exists in the "Crawl Meta Data" f…5.3
• CVE-2024-22651There is a command injection vulnerability in the ssdpcgi_ma…9.8
• CVE-2024-22653yasm commit 9defefae was discovered to contain a NULL pointe…4.8
• CVE-2024-22654tcpreplay v4.4.4 was discovered to contain an infinite loop …7.5
• CVE-2024-2266A vulnerability has been found in keerti1924 Secret-Coder-PH…6.1
• CVE-2024-22660TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vu…9.8
• CVE-2024-22662TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow v…9.8