CVE-2023-1460

🗓️ 17 Mar 2023 07:51:11Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

Vulnerability in SourceCodester Online Pizza Ordering System 1.0 allows remote attackers to initiate improper authentication via admin/ajax.php

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-1460	17 Mar 202311:36	–	circl
CNNVD	Online Pizza Ordering System 授权问题漏洞	17 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-1460 SourceCodester Online Pizza Ordering System Password Change improper authentication	17 Mar 202307:51	–	cvelist
EUVD	EUVD-2023-23709	3 Oct 202520:07	–	euvd
NVD	CVE-2023-1460	17 Mar 202308:15	–	nvd
OSV	CVE-2023-1460	17 Mar 202308:15	–	osv
Prion	Authentication flaw	17 Mar 202308:15	–	prion
Positive Technologies	PT-2023-16998 · Unknown · Sourcecodester Online Pizza Ordering System	17 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-1460	23 May 202502:32	–	redhatcve

NVD

Vulners

Node

online_pizza_ordering_system_project online_pizza_ordering_systemMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Online Pizza Ordering System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Password Change Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
action	query param	admin/ajax.php?action=save_user	Improper authentication vulnerability in Password Change Handler allowing remote manipulation via the admin/ajax.php?action=save_user endpoint.	CWE-287

21 Nov 2024 07:39Current

8.1High risk

Vulners AI Score8.1

CVSS 3.16.5 - 9.8

CVSS 26.4

CVSS 36.5

EPSS0.0169

CWE-287