PT-2023-23424 · Unknown · Sourcecodester Online Computer/Laptop Store

Zap!@3 · Publicado 2023-07-13 · Atualizado 2024-11-12 · CVE-2023-31704

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Computer and Laptop Store version 1.0

Description The issue allows remote attackers to elevate privileges to the administrator's role due to Incorrect Access Control.

Recommendations For Sourcecodester Online Computer and Laptop Store version 1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2023-31704

Produtos afetados

Sourcecodester Online Computer/Laptop Store

Referências · 6

• 🔥 https://github.com/d34dun1c02n/CVE-2023-31704 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-31704 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-31704 · Aviso do Fabricante
• https://t.me/cibsecurity/66667 · Publicação no Telegram
• https://sourcecodester.com/php/16397/online-computer-and-laptop-store-using-php-and-mysql-source-code-free-download.html · Nota
• https://t.me/cvenotify/101385 · Publicação no Telegram