PT-2021-23751 · Unknown · Sourcecodester Simple Subscription Website

Published 2021-11-03 · Updated 2025-02-24 · CVE-2021-43140

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Subscription Website version 1.0

Description A SQL Injection issue exists via the login, allowing potential exploitation.

Recommendations For version 1.0, consider disabling the login functionality until a patch is available to prevent SQL Injection attacks. Restrict access to the login module to minimize the risk of exploitation. Avoid using sensitive parameters in the affected login endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-43140

Affected Products

Sourcecodester Simple Subscription Website

References · 9

• 🔥 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43140 · Exploit
• 🔥 https://exploit-db.com/exploits/50522 · Exploit
• 🔥❌ https://github.com/Dir0x/CVE-2021-43140 · Exploit, Deleted
• 🔥 http://packetstormsecurity.com/files/164968/Simple-Subscription-Website-1.0-SQL-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2021-43140 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43140 · Security Note
• https://t.me/cvenotify/112241 · Telegram Post
• https://t.me/cvenotify/23036 · Telegram Post
• https://t.me/cibsecurity/31762 · Telegram Post