PT-2026-23972 · Sourcecodester · Client Database Management System

Adarsh007 · CVE-2026-3761 · Published 2026-03-08 · Updated 2026-03-08

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0

Description The software contains a flaw related to improper authorization. A manipulation of the user id argument in the /superadmin user delete.php endpoint can lead to unauthorized access. The exploit has been published.

Recommendations Apply any available updates to address the improper authorization issue in the /superadmin user delete.php endpoint. As a temporary workaround, restrict access to the /superadmin user delete.php endpoint. Avoid using the user id parameter in the /superadmin user delete.php endpoint until the issue is resolved.

Exploit

Fix

Incorrect Privilege Assignment

Improper Authorization

Weakness Enumeration

CWE-266

CWE-285

Related Identifiers

CVE-2026-3761

Affected Products

Client Database Management System

References · 11

• 🔥 https://gist.github.com/Adarshh-A/dd8884d768d9dde9072fe5efce453824 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3761 · Security Note
• https://osv.dev/vulnerability/CVE-2026-3761 · Vendor Advisory
• https://vuldb.com/?ctiid.349739 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/?id.349739 · Note
• https://twitter.com/cyberbivash/status/2030739967278772603 · Twitter Post
• https://t.me/cveNotify/154714 · Telegram Post
• https://vuldb.com/?submit.768120 · Note
• https://t.me/CVEtracker/46832 · Telegram Post
• https://twitter.com/CVEnew/status/2030747837970235397 · Twitter Post