CVE-2024-3139

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function save_users of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-258914 is the identifier assigned to this vulnerability.

• CWE-285
• CWE-639

• https://github.com/Sospiro014/zday1/blob/main/Laboratory_Management_System.mdExploit
• https://vuldb.com/?ctiid.258914Permissions Required
• https://vuldb.com/?id.258914Permissions Required
• https://vuldb.com/?submit.308207Third Party Advisory
• https://github.com/Sospiro014/zday1/blob/main/Laboratory_Management_System.mdExploit
• https://vuldb.com/?ctiid.258914Permissions Required
• https://vuldb.com/?id.258914Permissions Required
• https://vuldb.com/?submit.308207Third Party Advisory

Published

Apr 1, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31384Cross-Site Request Forgery (CSRF) vulnerability in Rara Them…4.3
• CVE-2024-31385Cross-Site Request Forgery (CSRF) vulnerability in Reservati…4.3
• CVE-2024-31386Cross-Site Request Forgery (CSRF) vulnerability in Hidekazu …4.3
• CVE-2024-31387Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2024-31388Cross-Site Request Forgery (CSRF) vulnerability in Pauple Ta…4.3
• CVE-2024-31389Cross-Site Request Forgery (CSRF) vulnerability in Ertano Mi…5.4
• CVE-2024-31390: Improper Control of Generation of Code ('Code Injection') …9.9
• CVE-2024-31391Insertion of Sensitive Information into Log File vulnerabili…6.5
• CVE-2024-31392If an insecure element was added to a page after a delay, Fi…7.5
• CVE-2024-31393Dragging Javascript URLs to the address bar could cause them…4.3
• CVE-2024-31394Directory traversal vulnerability exists in a-blog cms Ver.3…6.5
• CVE-2024-31395Cross-site scripting vulnerability exists in a-blog cms Ver.…6.1