Dashboard / CVE-2024-3376

CVE-2024-3376

HIGH
MEDIUM Priority: 0.10 BB Relevance: 75/100
Published: 2024-04-06 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: Low
A: Low

Description

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file config.php. The manipulation of the argument url leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259497 was assigned to this vulnerability.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
SourceCodester Computer Laboratory Management System 1.0
SourceCodester Computer Laboratory Management System 1.0

References & Advisories (4)

https://vuldb.com/?id.259497
vdb-entry technical-description
https://vuldb.com/?submit.311154
third-party-advisory
https://vuldb.com/?ctiid.259497
signature permissions-required

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS — Exploitation Probability

1.34%
Raw Score 0.013370
Percentile 71.7%
Date 2026-11-14

EPSS Trend

2026-11-14
0.01337
2026-11-13
0.01337
2026-11-12
0.01337
2026-11-10
0.01337
2026-11-09
0.01337
2026-11-08
0.01337
2026-11-07
0.01337
2026-11-06
0.01337
2026-11-05
0.01337
2026-11-04
0.01337
2026-11-03
0.01337

Intelligence Sources

mitre ref →

External Links