CVE-2024-2333

A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /add_members.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256284.

• CWE-89

• https://github.com/0x404Ming/CVE_Hunter/blob/main/SQLi-3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.256284Permissions Required, VDB Entry
• https://vuldb.com/?id.256284Third Party Advisory, VDB Entry
• https://github.com/0x404Ming/CVE_Hunter/blob/main/SQLi-3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.256284Permissions Required, VDB Entry
• https://vuldb.com/?id.256284Third Party Advisory, VDB Entry

Published

Mar 9, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23324Envoy is a high-performance edge/middle/service proxy. Exter…7.5
• CVE-2024-23325Envoy is a high-performance edge/middle/service proxy. Envoy…7.5
• CVE-2024-23326Envoy is a cloud-native, open source edge and service proxy.…8.2
• CVE-2024-23327Envoy is a high-performance edge/middle/service proxy. When …7.5
• CVE-2024-23328Dataease is an open source data visualization analysis tool.…9.1
• CVE-2024-23329 changedetection.io is an open source tool designed to monit…3.7
• CVE-2024-23330Tuta is an encrypted email service. In versions prior to 119…5.3
• CVE-2024-23331Vite is a frontend tooling framework for javascript. The Vit…7.5
• CVE-2024-23332The Notary Project is a set of specifications and tools inte…6.8
• CVE-2024-23333LDAP Account Manager (LAM) is a webfrontend for managing ent…6.6
• CVE-2024-23334aiohttp is an asynchronous HTTP client/server framework for …7.5
• CVE-2024-23335MyBB is a free and open source forum software. The backup ma…4.7