CVE-2024-3614

A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument nama_customer/alamat_customer/notelp_customer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260271.

• CWE-79

• https://github.com/fubxx/CVE/blob/main/WarehouseManagementSystemXSS3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.260271Permissions Required, VDB Entry
• https://vuldb.com/?id.260271Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.312703Third Party Advisory, VDB Entry
• https://github.com/fubxx/CVE/blob/main/WarehouseManagementSystemXSS3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.260271Permissions Required, VDB Entry
• https://vuldb.com/?id.260271Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.312703Third Party Advisory, VDB Entry

Published

Apr 11, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36130An insufficient authorization vulnerability in web component…9.8
• CVE-2024-36131An insecure deserialization vulnerability in web component o…8.8
• CVE-2024-36132Insufficient verification of authentication controls in EPMM…7.5
• CVE-2024-36136An off-by-one error in WLInfoRailService in Ivanti Avalanche…7.5
• CVE-2024-36137A vulnerability has been identified in Node.js, affecting us…3.3
• CVE-2024-36138Bypass incomplete fix of CVE-2024-27980, that arises from im…8.1
• CVE-2024-36140A vulnerability has been identified in OZW672 (All versions …5.4
• CVE-2024-36141Adobe Experience Manager versions 6.5.20 and earlier are aff…5.4
• CVE-2024-36142Adobe Experience Manager versions 6.5.20 and earlier are aff…5.4
• CVE-2024-36143Adobe Experience Manager versions 6.5.20 and earlier are aff…5.4
• CVE-2024-36144Adobe Experience Manager versions 6.5.20 and earlier are aff…5.4
• CVE-2024-36146Adobe Experience Manager versions 6.5.20 and earlier are aff…5.4