CVE-2024-3355

A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin/mod_users/controller.php?action=add. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259459.

• CWE-89

• https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-09Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.259459Permissions Required, VDB Entry
• https://vuldb.com/?id.259459Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310224Third Party Advisory, VDB Entry
• https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-09Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.259459Permissions Required, VDB Entry
• https://vuldb.com/?id.259459Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310224Third Party Advisory, VDB Entry

Published

Apr 5, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33544Improper Neutralization of Special Elements used in an SQL C…9.3
• CVE-2024-33545Missing Authorization vulnerability in AA-Team WZone.This is…9.8
• CVE-2024-33546Improper Neutralization of Special Elements used in an SQL C…9.6
• CVE-2024-33547Missing Authorization vulnerability in AA-Team WZone.This is…8.8
• CVE-2024-33548Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2024-33549Improper Privilege Management vulnerability in AA-Team WZone…8.8
• CVE-2024-33550Improper Privilege Management vulnerability in JR King/Eran …8.8
• CVE-2024-33551Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2024-33552Improper Privilege Management vulnerability in 8theme XStore…9.8
• CVE-2024-33553Deserialization of Untrusted Data vulnerability in 8theme XS…9.8
• CVE-2024-33554Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2024-33555Missing Authorization vulnerability in 8theme XStore Core.Th…8.8