SourceCodester Service Provider Management System improper authorization
CVE-2023-2345

6.3MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Service Provider Management System
Vendor
CVE Published:
27 April 2023

What is CVE-2023-2345?

An improper authorization vulnerability has been identified in the SourceCodester Service Provider Management System 1.0. This flaw resides within the file /classes/Master.php?f=delete_inquiry, where an attacker can manipulate the functionality to gain unauthorized access. The vulnerability allows remote exploitation, posing significant security risks to the system and its users.

Affected Version(s)

Service Provider Management System 1.0

References

https://vuldb.com/?id.227588
vdb-entrytechnical-description
https://vuldb.com/?ctiid.227588
signature

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

polowong (VulDB User)
.
CVE-2023-2345 : SourceCodester Service Provider Management System improper authorization