CVE-2024-3612

A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260269 was assigned to this vulnerability.

• CWE-79

• https://github.com/fubxx/CVE/blob/main/WarehouseManagementSystemXSS.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.260269Permissions Required, VDB Entry
• https://vuldb.com/?id.260269Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.312700Third Party Advisory, VDB Entry
• https://github.com/fubxx/CVE/blob/main/WarehouseManagementSystemXSS.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.260269Permissions Required, VDB Entry
• https://vuldb.com/?id.260269Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.312700Third Party Advisory, VDB Entry

Published

Apr 11, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36114Aircompressor is a library with ports of the Snappy, LZO, LZ…8.6
• CVE-2024-36115Reposilite is an open source, lightweight and easy-to-use re…7.1
• CVE-2024-36116Reposilite is an open source, lightweight and easy-to-use re…9.8
• CVE-2024-36117Reposilite is an open source, lightweight and easy-to-use re…7.5
• CVE-2024-36118MeterSphere is a test management and interface testing tool.…4.3
• CVE-2024-36119Statamic is a, Laravel + Git powered CMS designed for buildi…1.8
• CVE-2024-36120javascript-deobfuscator removes common JavaScript obfuscatio…7.8
• CVE-2024-36121 netty-incubator-codec-ohttp is the OHTTP implementation for…9.1
• CVE-2024-36122Discourse is an open-source discussion platform. Prior to ve…4.3
• CVE-2024-36123Citizen is a MediaWiki skin that makes extensions part of th…5.4
• CVE-2024-36124iq80 Snappy is a compression/decompression library. When unc…5.3
• CVE-2024-36127apko is an apk-based OCI image builder. apko exposures HTTP …7.5