PT-2026-23972 · Sourcecodester · Client Database Management System

Adarsh007 · Publicado 2026-03-08 · Atualizado 2026-03-08 · CVE-2026-3761

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0

Description The software contains a flaw related to improper authorization. A manipulation of the user id argument in the /superadmin user delete.php endpoint can lead to unauthorized access. The exploit has been published.

Recommendations Apply any available updates to address the improper authorization issue in the /superadmin user delete.php endpoint. As a temporary workaround, restrict access to the /superadmin user delete.php endpoint. Avoid using the user id parameter in the /superadmin user delete.php endpoint until the issue is resolved.

Exploit

Correção

Incorrect Privilege Assignment

Improper Authorization

Enumeração de Fraquezas

CWE-266

CWE-285

Identificadores relacionados

CVE-2026-3761

Produtos afetados

Client Database Management System

Referências · 11

• 🔥 https://gist.github.com/Adarshh-A/dd8884d768d9dde9072fe5efce453824 · Exploit
• https://vuldb.com/?ctiid.349739 · Nota
• https://sourcecodester.com · Nota
• https://vuldb.com/?id.349739 · Nota
• https://twitter.com/cyberbivash/status/2030739967278772603 · Publicação no Twitter
• https://t.me/cveNotify/154714 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-3761 · Nota de Segurança
• https://vuldb.com/?submit.768120 · Nota
• https://t.me/CVEtracker/46832 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2030747837970235397 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-3761 · Aviso do Fabricante