PT-2026-55753 · Sourcecodester · Multi-Vendor Online Groceries Management System

Chr1S · Publicado 2026-07-05 · Atualizado 2026-07-05 · CVE-2026-14690

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save users of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Exploit

Correção

Improper Authorization

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-285

CWE-266

Identificadores relacionados

CVE-2026-14690

Produtos afetados

Multi-Vendor Online Groceries Management System

Referências · 7

• 🔥 https://github.com/lee945/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14690 · Nota de Segurança
• https://vuldb.com/vuln/376286 · Nota
• https://vuldb.com/cve/CVE-2026-14690 · Nota
• https://sourcecodester.com · Nota
• https://vuldb.com/vuln/376286/cti · Nota
• https://vuldb.com/submit/846830 · Nota