CVE-2024-3358

A vulnerability classified as problematic was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument to leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259462 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-12.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259462Permissions Required, VDB Entry
• https://vuldb.com/?id.259462Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310229Third Party Advisory, VDB Entry
• https://github.com/qqqyc/vlun1/blob/main/Aplaya-Beach-Resort-Online-Reservation-System-12.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259462Permissions Required, VDB Entry
• https://vuldb.com/?id.259462Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310229Third Party Advisory, VDB Entry

Published

Apr 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33574Missing Authorization vulnerability in appsbd Vitepos.This i…4.3
• CVE-2024-33575Exposure of Sensitive Information to an Unauthorized Actor v…5.3
• CVE-2024-33576Missing Authorization vulnerability in Ollybach WPPizza.This…6.5
• CVE-2024-33577A vulnerability has been identified in Simcenter Femap (All …7.8
• CVE-2024-33578A DLL hijack vulnerability was reported in Lenovo Leyun that…7.8
• CVE-2024-33579A DLL hijack vulnerability was reported in Lenovo Baiying th…7.8
• CVE-2024-33580A DLL hijack vulnerability was reported in Lenovo Personal C…7.8
• CVE-2024-33581A DLL hijack vulnerability was reported in Lenovo PC Manager…7.8
• CVE-2024-33582A DLL hijack vulnerability was reported in Lenovo Service Fr…7.8
• CVE-2024-33583A vulnerability has been identified in SIMATIC RTLS Locating…4.8
• CVE-2024-33584URL Redirection to Untrusted Site ('Open Redirect') vulnerab…4.7
• CVE-2024-33585Missing Authorization vulnerability in Tyche Softwares Payme…4.3