CVE-2023-26774

An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint...

CVE-2023-26774

CVE-2023-26774 affects Sales Tracker Management System v1.0. The vulnerability is described as an insecure direct object reference in the admin/reports endpoint, allowing a remote attacker to access sensitive information via the sales.php component. The issue is evidenced across multiple sources ...

Sales Tracker Management System 1.0 Insecure Direct Object Reference

Exploit Title: Sales Tracker Management System v1.0 - Sensitive information disclosure CVE: CVE-2023-26774 Exploit Author: Achuth V P retrymp3 Date: February 08, 2023 Vendor Homepage: https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html Software...