PT-2026-23939 · Unknown · Sourcecodester Client Database Management System

Adarsh007 · Publicado 2026-03-08 · Atualizado 2026-03-13 · CVE-2026-3734

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0

Description A flaw exists in SourceCodester Client Database Management System that allows improper authorization. The issue is related to the manipulation of the manager id argument in the /fetch manager details.php file. This manipulation occurs within an unknown function. The attack can be initiated remotely. The exploit has been published.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Privilege Assignment

Improper Authorization

Enumeração de Fraquezas

CWE-266

CWE-285

Identificadores relacionados

CVE-2026-3734

Produtos afetados

Sourcecodester Client Database Management System

Referências · 13

• 🔥 https://gist.github.com/Adarshh-A/f25452a4fe736babd39b9a1b800e98d0 · Exploit
• https://vuldb.com/?id.349712 · Nota
• https://twitter.com/cracbot/status/2032411433317847086 · Publicação no Twitter
• https://t.me/cveNotify/154685 · Publicação no Telegram
• https://t.me/cveNotify/154829 · Publicação no Telegram
• https://vuldb.com/?submit.767227 · Nota
• https://twitter.com/CVEnew/status/2030747861869339017 · Publicação no Twitter
• https://sourcecodester.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3734 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-3734 · Aviso do Fabricante
• https://twitter.com/cracbot/status/2032049095599407287 · Publicação no Twitter
• https://vuldb.com/?ctiid.349712 · Nota
• https://t.me/CVEtracker/46805 · Publicação no Telegram