CVE-2024-3014

A vulnerability classified as critical has been found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file Actions.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258300.

• CWE-89

• https://github.com/Viciglu/cvehub/blob/main/Simple%20Subscription%20Website%20with%20Admin%20System%20Actions.php%20has%20Sqlinjection.pdfExploit
• https://vuldb.com/?ctiid.258300Permissions Required, VDB Entry
• https://vuldb.com/?id.258300Permissions Required, VDB Entry
• https://vuldb.com/?submit.305648Third Party Advisory, VDB Entry
• https://github.com/Viciglu/cvehub/blob/main/Simple%20Subscription%20Website%20with%20Admin%20System%20Actions.php%20has%20Sqlinjection.pdfExploit
• https://vuldb.com/?ctiid.258300Permissions Required, VDB Entry
• https://vuldb.com/?id.258300Permissions Required, VDB Entry
• https://vuldb.com/?submit.305648Third Party Advisory, VDB Entry

Published

Mar 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3013A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. Th…8.8
• CVE-2024-30130HCL Nomad server on Domino is vulnerable to the cache contai…7.5
• CVE-2024-30132HCL Nomad server on Domino did not configure certain HTTP Se…7.5
• CVE-2024-30133HCL Traveler for Microsoft Outlook (HTMO) is susceptible to …5.3
• CVE-2024-30134The HCL Traveler for Microsoft Outlook executable (HTMO.exe)…7.5
• CVE-2024-30135HCL DRYiCE AEX is potentially impacted by disclosure of sens…7.5
• CVE-2024-30140HCL BigFix Compliance is affected by unvalidated redirects a…5.4
• CVE-2024-30141HCL BigFix Compliance is vulnerable to the generation of err…4.7
• CVE-2024-30142HCL BigFix Compliance is affected by a missing secure flag o…3.8
• CVE-2024-30143HCL AppScan Traffic Recorder fails to adequately neutralize …4.3
• CVE-2024-30145Multiple vectors in HCL Domino Volt and Domino Leap allow cl…6.1
• CVE-2024-30146Improper access control of endpoint in HCL Domino Leap allow…2.7