CVE-2024-3369

A vulnerability, which was classified as critical, has been found in code-projects Car Rental 1.0. Affected by this issue is some unknown functionality of the file add-vehicle.php. The manipulation of the argument Upload Image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259490 is the identifier assigned to this vulnerability.

• CWE-434

• https://drive.google.com/file/d/1wLMnGzcbyCoZ_Wp-bHpLD49MZ9-XHPUK/view?usp=drive_linkExploit
• https://vuldb.com/?ctiid.259490Permissions Required, VDB Entry
• https://vuldb.com/?id.259490Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.311147Third Party Advisory
• https://drive.google.com/file/d/1wLMnGzcbyCoZ_Wp-bHpLD49MZ9-XHPUK/view?usp=drive_linkExploit
• https://vuldb.com/?ctiid.259490Permissions Required, VDB Entry
• https://vuldb.com/?id.259490Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.311147Third Party Advisory

Published

Apr 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33684Missing Authorization vulnerability in Pdfcrowd Save as PDF …6.5
• CVE-2024-33685Missing Authorization vulnerability in Jegstudio Startupzy s…4.3
• CVE-2024-33686Missing Authorization vulnerability in Extend Themes Pathway…4.3
• CVE-2024-33687Insufficient verification of data authenticity issue exists …7.5
• CVE-2024-33688Cross-Site Request Forgery (CSRF) vulnerability in Extend Th…8.8
• CVE-2024-33689Cross-Site Request Forgery (CSRF) vulnerability in Tony Zeol…4.3
• CVE-2024-33690Cross-Site Request Forgery (CSRF) vulnerability in Jegstudio…4.3
• CVE-2024-33691Cross-Site Request Forgery (CSRF) vulnerability in OptinMons…4.3
• CVE-2024-33692Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2024-33693Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2024-33694Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2024-33695Improper Neutralization of Input During Web Page Generation …5.9