CVE-2024-3376

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file config.php. The manipulation of the argument url leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259497 was assigned to this vulnerability.

• CWE-698
• CWE-670

• https://github.com/Sospiro014/zday1/blob/main/Execution_After_Redirect.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259497Permissions Required
• https://vuldb.com/?id.259497Third Party Advisory
• https://vuldb.com/?submit.311154Third Party Advisory
• https://github.com/Sospiro014/zday1/blob/main/Execution_After_Redirect.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259497Permissions Required
• https://vuldb.com/?id.259497Third Party Advisory
• https://vuldb.com/?submit.311154Third Party Advisory

Published

Apr 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3374An unauthenticated user can trigger a fatal assertion in the…5.3
• CVE-2024-33748Cross-site scripting (XSS) vulnerability in the search funct…4.1
• CVE-2024-33749DedeCMS V5.7.114 is vulnerable to deletion of any file via m…9.1
• CVE-2024-3375Incorrect Permission Assignment for Critical Resource vulner…9.4
• CVE-2024-33752An arbitrary file upload vulnerability exists in emlog pro 2…6.3
• CVE-2024-33753Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier ver…8.2
• CVE-2024-33763lunasvg v2.3.9 was discovered to contain a stack-buffer-unde…7.5
• CVE-2024-33764lunasvg v2.3.9 was discovered to contain a stack-overflow at…5.5
• CVE-2024-33766lunasvg v2.3.9 was discovered to contain an FPE (Floating Po…5.3
• CVE-2024-33767lunasvg v2.3.9 was discovered to contain a segmentation viol…5
• CVE-2024-33768lunasvg v2.3.9 was discovered to contain a segmentation viol…9.8
• CVE-2024-3377A vulnerability classified as problematic was found in Sourc…6.1