PT-2023-16607 · Sourcecodester · Sourcecodester Employee Task Management System

Navaidansari · CVE-2023-0905 · Published 2023-02-18 · Updated 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Task Management System version 1.0

Description A critical issue has been discovered, affecting an unknown function of the file changePasswordForEmployee.php, leading to improper authentication. This issue can be exploited remotely.

Recommendations For SourceCodester Employee Task Management System version 1.0, consider restricting access to the changePasswordForEmployee.php file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-0905

Affected Products

Sourcecodester Employee Task Management System

References · 7

• 🔥 https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20Broken%20Authentication.md · Exploit
• 🔥 https://exploit-db.com/exploits/51285 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-0905 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0905 · Vendor Advisory
• https://vuldb.com/?id.221454 · Note
• https://t.me/cvenotify/44632 · Telegram Post
• https://vuldb.com/?ctiid.221454 · Note