CVE-2024-2265: php mysql user — Exploit

Description

A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.sql. The manipulation leads to inclusion of sensitive information in source code. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256035. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Is your site exposed to CVE-2024-2265?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

CWE-540 CWE-540

Affected Products

Vendor	Product	Versions
keerti1924	php_mysql_user_signup_login_system	All

References

Exploits

https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20publicly%20exposed%20password%20hashes.md https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20publicly%20exposed%20password%20hashes.md

Other References

https://vuldb.com/?ctiid.256035 https://vuldb.com/?id.256035 https://vuldb.com/?ctiid.256035 https://vuldb.com/?id.256035

Frequently Asked Questions

What is CVE-2024-2265? +

A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.sql. The manipulation leads to inclusion of sensitive information in source code. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256035. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. It has a CVSS v3.1 base score of 5.3 (MEDIUM).

How severe is CVE-2024-2265? +

CVE-2024-2265 has a CVSS v3.1 score of 5.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-2265? +

CVE-2024-2265 affects products from keerti1924, specifically: php_mysql_user_signup_login_system. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-2265? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-23215

PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are …

CVE-2026-84390 9.8

A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may …

CVE-2025-26013 8.2

An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.

CVE-2026-73591 7.5

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code …

CVE-2024-1272 7.5

Inclusion of Sensitive Information in Source Code vulnerability in TNB Mobile Solutions Cockpit Software allows Retrieve Embedded Sensitive Data.This issue …

CVE-2026-103097 7.5

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive …

CVE-2024-2265