---
id: CVE-2024-3376
title: SourceCodester Computer Laboratory Management System config.php redirect
summary: >-
  A vulnerability classified as critical has been found in SourceCodester
  Computer Laboratory Management System 1.0. This affects an unknown part of the
  file config.php. The manipulation of the argument url leads to execution after
  redirec…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-698
vendor: SourceCodester
product: Computer Laboratory Management System
affected:
  - computer_laboratory_management_system 1.0
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2025-02-26T18:55:30.676838Z'
exploitAvailable: true
published: '2024-04-06'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T23:58:21.468Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-3376'
references:
  - url: 'https://vuldb.com/?id.259497'
    label: >-
      VDB-259497 | SourceCodester Computer Laboratory Management System
      config.php redirect
  - url: 'https://vuldb.com/?ctiid.259497'
    label: 'VDB-259497 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/?submit.311154'
    label: >-
      Submit #311154 | sourcecodester Computer Laboratory Management System 1.0
      After Redirect (EAR) and Authorization Bypass
  - url: 'https://github.com/Sospiro014/zday1/blob/main/Execution_After_Redirect.md'
tags:
  - cve.org
  - exploit-available
epss: 0.01337
epssPercentile: 0.71436
ingestedAt: '2026-11-05T20:33:06.638Z'
---

## Overview

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file config.php. The manipulation of the argument url leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259497 was assigned to this vulnerability.

## Affected

- `computer_laboratory_management_system 1.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.