CVE-2024-2355

A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /secret_coder.sql. The manipulation leads to inclusion of sensitive information in source code. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256315. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-540

• https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20%5BSecret-Coder-PHP-Project%20Sensitive%20Information%20Disclosure%5D%20on%20secret_coder.sql.md
• https://vuldb.com/?ctiid.256315
• https://vuldb.com/?id.256315
• https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20%5BSecret-Coder-PHP-Project%20Sensitive%20Information%20Disclosure%5D%20on%20secret_coder.sql.md
• https://vuldb.com/?ctiid.256315
• https://vuldb.com/?id.256315

Published

Mar 10, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23535A Path Traversal vulnerability in web component of Ivanti Av…8.8
• CVE-2024-23537Improper Privilege Management vulnerability in Apache Finera…8.8
• CVE-2024-23538Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2024-23539Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2024-2354A vulnerability, which was classified as problematic, was fo…6.5
• CVE-2024-23540The HCL BigFix Inventory server is vulnerable to path traver…5.3
• CVE-2024-23550HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitiv…5.5
• CVE-2024-23551Database scanning using username and password stores the cre…6.5
• CVE-2024-23553A cross-site scripting (XSS) vulnerability in the Web Report…5.4
• CVE-2024-23554Cross-Site Request Forgery (CSRF) on Session Token vulnerabi…8.8
• CVE-2024-23556SSL/TLS Renegotiation functionality potentially leading to D…7.5
• CVE-2024-23557HCL Connections contains a user enumeration vulnerability. C…4.3