CVE-2022-32310

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php...

CVE-2022-32310

CVE-2022-32310 affects Ingredient Stock Management System v1.0. The issue is an access-control flaw in the Users.php endpoint that lets an unauthenticated attacker obtain or take over user accounts via a crafted POST request. Impact per sources indicates account takeover with no required user int...