CVSS 3.1 Score 7.3 of 10 (high)


Published Apr 5, 2024


CVE-2024-3355 is a critical vulnerability found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. The vulnerability allows for SQL injection through manipulation of the argument name in the file admin/mod_users/controller.php?action=add. It can be exploited remotely, and the exploit has been disclosed to the public. The associated identifier for this vulnerability is VDB-259459. This vulnerability poses a potential danger to organizations using the affected system, as it could allow attackers to execute malicious SQL commands and potentially gain unauthorized access to sensitive data. It is recommended for organizations to remediate this vulnerability by applying appropriate patches or updates provided by the vendor, and implementing secure coding practices to prevent SQL injection attacks.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-3355 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options