A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.sql. The manipulation leads to inclusion of sensitive information in source code. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256035. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20publicly%20exposed%20password%20hashes.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.256035 | Permissions Required |
| https://vuldb.com/?id.256035 | Third Party Advisory |
| https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20publicly%20exposed%20password%20hashes.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.256035 | Permissions Required |
| https://vuldb.com/?id.256035 | Third Party Advisory |
Configurations
History
11 Mar 2025, 16:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Keerti1924
Keerti1924 php Mysql User Signup Login System |
|
| CPE | cpe:2.3:a:keerti1924:php_mysql_user_signup_login_system:1.0:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| References | () https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20publicly%20exposed%20password%20hashes.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.256035 - Permissions Required | |
| References | () https://vuldb.com/?id.256035 - Third Party Advisory |
Information
Published : 2024-03-07 22:15
Updated : 2025-03-11 16:53
NVD link : CVE-2024-2265
Mitre link : CVE-2024-2265
CVE.ORG link : CVE-2024-2265
JSON object : View
Products Affected
keerti1924
- php_mysql_user_signup_login_system
CWE