SourceCodester Inventory Management System index.php file inclusion

CVE-2023-4749

Summary

A severe security flaw has been identified in the SourceCodester Inventory Management System version 1.0, specifically related to the index.php file. The vulnerability arises from improper manipulation of the 'page' argument, allowing an attacker to execute unauthorized file inclusion. This weakness can be exploited remotely, posing significant risks to the integrity and security of the system. Public disclosure of the exploit raises concerns about potential attacks, emphasizing the urgency for users to apply necessary security measures.

References