CVE-2024-3364

A vulnerability was found in SourceCodester Online Library System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file admin/books/index.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259468.

• CWE-79

• https://github.com/thisissuperann/Vul/blob/main/Online-Library-System-06.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259468Permissions Required, VDB Entry
• https://vuldb.com/?id.259468Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310431Third Party Advisory, VDB Entry
• https://github.com/thisissuperann/Vul/blob/main/Online-Library-System-06.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259468Permissions Required, VDB Entry
• https://vuldb.com/?id.259468Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.310431Third Party Advisory, VDB Entry

Published

Apr 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33634Server-Side Request Forgery (SSRF) vulnerability in Piotnet …5.4
• CVE-2024-33635Missing Authorization vulnerability in Piotnet Piotnet Addon…7.5
• CVE-2024-33636Missing Authorization vulnerability in Mahesh Vora WP Page P…5.4
• CVE-2024-33637Insertion of Sensitive Information into Log File vulnerabili…7.5
• CVE-2024-33638Cross-Site Request Forgery (CSRF) vulnerability in Brijesh K…5.4
• CVE-2024-33639Improper Neutralization of Input During Web Page Generation …4.8
• CVE-2024-33640Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-33641Deserialization of Untrusted Data vulnerability in Team Yoas…5.4
• CVE-2024-33642Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2024-33643Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2024-33644Improper Control of Generation of Code ('Code Injection') vu…9.9
• CVE-2024-33645Improper Neutralization of Input During Web Page Generation …7.1