Improper access control

2023-03-2211:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

sourcecodester

e-commerce

access control

critical

remote attack

user manipulation

vdb-223550

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.5%

JSON

A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ecommerce/admin/user/controller.php?action=edit of the component Username Handler. The manipulation of the argument USERID leads to improper access controls. The attack may be launched remotely. VDB-223550 is the identifier assigned to this vulnerability.

CPENameOperatorVersion
e-commerce_systemeq1.0

CPE	Name	Operator	Version
	e-commerce_system	eq	1.0

References

vuldb.com/?ctiid.223550

vuldb.com/?id.223550