CVE-2024-3465

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected is the function laporan_filter of the file /application/controller/Transaki.php. The manipulation of the argument dari/sampai leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-259746 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259746Permissions Required
• https://vuldb.com/?id.259746Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.312313Third Party Advisory, VDB Entry
• https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259746Permissions Required
• https://vuldb.com/?id.259746Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.312313Third Party Advisory, VDB Entry

Published

Apr 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34644Improper access control in item selection related in Dressro…5.5
• CVE-2024-34645Improper input validation in ThemeCenter prior to SMR Sep-20…4.6
• CVE-2024-34646Improper access control in DualDarManagerProxy prior to SMR …5.5
• CVE-2024-34647Incorrect use of privileged API in DualDarManagerProxy prior…5.5
• CVE-2024-34648Improper Handling of Insufficient Permissions in KnoxMiscPol…5.5
• CVE-2024-34649Improper access control in new Dex Mode in multitasking fram…2.4
• CVE-2024-34650Incorrect authorization in CocktailbarService prior to SMR S…3.3
• CVE-2024-34651Improper authorization in My Files prior to SMR Sep-2024 Rel…5.5
• CVE-2024-34652Incorrect authorization in kperfmon prior to SMR Sep-2024 Re…3.3
• CVE-2024-34653Path Traversal in My Files prior to SMR Sep-2024 Release 1 a…4.6
• CVE-2024-34654Improper Export of android application component in My Files…5.5
• CVE-2024-34655Incorrect use of privileged API in UniversalCredentialManage…5.5