CVE-2024-3221

A vulnerability classified as critical was found in SourceCodester PHP Task Management System 1.0. This vulnerability affects unknown code of the file attendance-info.php. The manipulation of the argument user_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259066 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/SLthendieck/cve-report/blob/main/1.pdfExploit
• https://vuldb.com/?ctiid.259066Permissions Required, VDB Entry
• https://vuldb.com/?id.259066Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.308626Third Party Advisory, VDB Entry
• https://github.com/SLthendieck/cve-report/blob/main/1.pdfExploit
• https://vuldb.com/?ctiid.259066Permissions Required, VDB Entry
• https://vuldb.com/?id.259066Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.308626Third Party Advisory, VDB Entry

Published

Apr 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3217The WP Directory Kit plugin for WordPress is vulnerable to S…8.8
• CVE-2024-3218A vulnerability classified as critical has been found in Shi…5.4
• CVE-2024-3219The “socket” module provides a pure-Python fallback to the …5.1
• CVE-2024-3220There is a defect in the CPython standard library module “mi…2.3
• CVE-2024-32205Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: non…
• CVE-2024-32206A stored cross-site scripting (XSS) vulnerability in the com…4.6
• CVE-2024-32210The LoMag WareHouse Management application version 1.0.20.12…5.3
• CVE-2024-32211An issue in LOGINT LoMag Inventory Management v1.0.20.120 an…5.5
• CVE-2024-32212SQL Injection vulnerability in LOGINT LoMag Inventory Manage…8.1
• CVE-2024-32213The LoMag WareHouse Management application version 1.0.20.12…5.3
• CVE-2024-3222A vulnerability, which was classified as critical, has been …8.8
• CVE-2024-32228FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV…6.6