CVE-2024-3352

A vulnerability has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/mod_comments/index.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259456.

• CWE-89

• https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-05Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.259456Permissions Required, VDB Entry
• https://vuldb.com/?id.259456Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310220Third Party Advisory, VDB Entry
• https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-05Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.259456Permissions Required, VDB Entry
• https://vuldb.com/?id.259456Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310220Third Party Advisory, VDB Entry

Published

Apr 5, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33514Unauthenticated Denial-of-Service (DoS) vulnerabilities exis…7.5
• CVE-2024-33515Unauthenticated Denial-of-Service (DoS) vulnerabilities exis…7.5
• CVE-2024-33516An unauthenticated Denial of Service (DoS) vulnerability exi…7.5
• CVE-2024-33517An unauthenticated Denial-of-Service (DoS) vulnerability exi…7.5
• CVE-2024-33518An unauthenticated Denial-of-Service (DoS) vulnerability exi…5.3
• CVE-2024-33519A vulnerability in the web-based management interface of HPE…7.2
• CVE-2024-33522In vulnerable versions of Calico (v3.27.2 and below), Calico…6.7
• CVE-2024-33525A Stored Cross-site Scripting (XSS) vulnerability in the "Im…4.3
• CVE-2024-33526A Stored Cross-site Scripting (XSS) vulnerability in the "Im…7.1
• CVE-2024-33527A Stored Cross-site Scripting (XSS) vulnerability in the "Im…5.4
• CVE-2024-33528A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7…4.7
• CVE-2024-33529ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS…7.2