ORETNOM23 Simple Subscription Website vulnerabilities

7 CVEs affecting ORETNOM23 Simple Subscription Website, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-4093, published 2024-04-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-43140, published 2021-11-03. Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days. SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login.
CVE-2022-26283, published 2022-03-21. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint. This vulnerability allows attackers to dump the application's…
CVE-2021-43141, published 2021-11-03. Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application.
CVE-2024-4093, published 2024-04-24. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file view_application.php. The manipulation of…
CVE-2024-3015, published 2024-03-28. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in SourceCodester Simple Subscription Website 1.0. Affected by this vulnerability is an unknown functionality of the file manage_plan.php. The…
CVE-2024-3014, published 2024-03-28. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file Actions.php. The manipulation of the argument…
CVE-2024-3042, published 2024-03-28. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown processing of the file manage_user.php. The manipulation of the…