CVE-2024-3316

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/category/view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259387.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Computer Laboratory Management System	1.0
computer_laboratory_management_system_project	computer_laboratory_management_system	1.0

References

https://github.com/adminininin/blob/blob/main/2.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.259387Permissions Required
https://vuldb.com/?id.259387Permissions Required
https://vuldb.com/?submit.309584Third Party Advisory
https://github.com/adminininin/blob/blob/main/2.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.259387Permissions Required
https://vuldb.com/?id.259387Permissions Required
https://vuldb.com/?submit.309584Third Party Advisory

Timeline

Published: Apr 4, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-331615.3J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function.CVE-2024-331649.8J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function.CVE-2024-33176.5An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authenticated user to exfi CVE-2024-33184.2A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator CVE-2024-331809.8Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/save CVE-2024-331818.8Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/add CVE-2024-331829.8Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addW CVE-2024-33199.1An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an aut CVE-2024-33206.1A vulnerability was found in SourceCodester eLearning System 1.0. It has been rated as problematic. Affected by this issue is some unknown f CVE-2024-332095.4FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" sectio CVE-2024-33214.8A vulnerability classified as problematic has been found in SourceCodester eLearning System 1.0. This affects an unknown part of the compone CVE-2024-332105.4A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious s