CVE-2022-26283

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the viewplan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

CVE-2022-26285

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

PT-2022-17765 · Unknown · Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: Simple Subscription Website version 1.0 Description: The issue allows attackers to dump the application's database via crafted HTTP requests. This is made possible by a SQL injection vulnerability via the id parameter in the "view plan"...

CVE-2021-43140

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login...

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

Sql injection

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login...

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

CVE-2021-43141

CVE-2021-43141 affects Sourcecodester Simple Subscription Website 1.0. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the id parameter in plan_application (and, per some sources, also via users_application). Root cause is improper handling/validation of user input in the a...

CVE-2021-43140

Sourcecodester Simple Subscription Website 1.0 is affected by a SQL Injection in the login/authentication flow. The vulnerability arises in the login endpoint (e.g., plan_application/Actions.php?a=login) and can be exploited with input like admin' or 1=1-- to bypass authentication and potentially...

Simple Subscription Website 跨站脚本漏洞

SourceCodester Simple Subscription Website is a web-based application. sourceCodester Simple Subscription Website 1.0 is vulnerable to cross-site scripting, which can be exploited by attackers to execute cross-site scripting via the plan application's id parameter to execute cross-site scripting...