PT-2023-16526 · Sourcecodester · Sourcecodester Best Online News Portal

Gab3 · Publicado 2023-02-12 · Atualizado 2024-05-17 · CVE-2023-0785

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Best Online News Portal version 1.0

Description A vulnerability was found in the file check availability.php, where the manipulation of the username argument leads to exposure of sensitive information through data queries. The attack can be launched remotely and has a rather high complexity, making exploitation difficult. The exploit has been disclosed to the public and may be used.

Recommendations For version 1.0, consider restricting access to the check availability.php file until a patch is available. As a temporary workaround, avoid using the username argument in the affected functionality to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-202

Identificadores relacionados

CVE-2023-0785

Produtos afetados

Sourcecodester Best Online News Portal

Referências · 8

• 🔥 https://youtu.be/n_BfBlsUIN8 · Exploit
• https://t.me/cvenotify/71637 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-0785 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-0785 · Nota de Segurança
• https://vuldb.com/?id.220645 · Nota
• https://vuldb.com/?ctiid.220645 · Nota
• https://t.me/cibsecurity/57967 · Publicação no Telegram
• https://t.me/cvenotify/59837 · Publicação no Telegram