CVE-2024-3359

A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument user_email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259463.

• CWE-89

• https://github.com/thisissuperann/Vul/blob/main/Online-Library-System-01Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.259463Permissions Required, VDB Entry
• https://vuldb.com/?id.259463Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310423Third Party Advisory, VDB Entry
• https://github.com/thisissuperann/Vul/blob/main/Online-Library-System-01Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.259463Permissions Required, VDB Entry
• https://vuldb.com/?id.259463Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310423Third Party Advisory, VDB Entry

Published

Apr 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33584URL Redirection to Untrusted Site ('Open Redirect') vulnerab…4.7
• CVE-2024-33585Missing Authorization vulnerability in Tyche Softwares Payme…4.3
• CVE-2024-33586Missing Authorization vulnerability in Photo Gallery Team Ph…5.3
• CVE-2024-33587Missing Authorization vulnerability in Copy Content Protecti…5.3
• CVE-2024-33588Missing Authorization vulnerability in codeSavory Knowledge …5.4
• CVE-2024-33589Missing Authorization vulnerability in WPOmnia KB Support.Th…6.5
• CVE-2024-33590Server-Side Request Forgery (SSRF) vulnerability in codeSavo…5
• CVE-2024-33591Missing Authorization vulnerability in Tips and Tricks HQ Ea…7.5
• CVE-2024-33592Server-Side Request Forgery (SSRF) vulnerability in SoftLab …5.4
• CVE-2024-33593Missing Authorization vulnerability in RedNao Smart Forms.Th…4.3
• CVE-2024-33594Missing Authorization vulnerability in Leaky Paywall.This is…7.5
• CVE-2024-33595Missing Authorization vulnerability in Jewel Theme Master Ad…8.8