CVE-2024-3360

A vulnerability, which was classified as critical, was found in SourceCodester Online Library System 1.0. Affected is an unknown function of the file admin/books/index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259464.

• CWE-89

• https://github.com/thisissuperann/Vul/blob/main/Online-Library-System-02Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.259464Permissions Required, VDB Entry
• https://vuldb.com/?id.259464Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310424Third Party Advisory, VDB Entry
• https://github.com/thisissuperann/Vul/blob/main/Online-Library-System-02Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.259464Permissions Required, VDB Entry
• https://vuldb.com/?id.259464Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310424Third Party Advisory, VDB Entry

Published

Apr 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33594Missing Authorization vulnerability in Leaky Paywall.This is…7.5
• CVE-2024-33595Missing Authorization vulnerability in Jewel Theme Master Ad…8.8
• CVE-2024-33596Missing Authorization vulnerability in Five Star Plugins Fiv…5.3
• CVE-2024-33597Missing Authorization vulnerability in ProFaceOff SSU.This i…7.5
• CVE-2024-33598Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2024-33599nscd: Stack-based buffer overflow in netgroup cache If the …8.1
• CVE-2024-33600nscd: Null pointer crashes after notfound response If the N…5.9
• CVE-2024-33601nscd: netgroup cache may terminate daemon on memory allocati…7.3
• CVE-2024-33602nscd: netgroup cache assumes NSS callback uses in-buffer str…7.4
• CVE-2024-33603The LevelOne WBR-6012 router has an information disclosure v…5.3
• CVE-2024-33604 A reflected cross-site scripting (XSS) vulnerability exist …6.1
• CVE-2024-33605Improper processing of some parameters of installed_emanual_…7.5