CodeAstro POS and Inventory Management System User Creation register_account access control
CVE-2023-6773
8.8HIGH
What is CVE-2023-6773?
A significant vulnerability exists within the CodeAstro POS and Inventory Management System 1.0, specifically in the User Creation Handler component found in the file /accounts_con/register_account. This vulnerability arises from improper access controls when manipulating the account_type argument with the input 'Admin,' enabling unauthorized access. As exploitation can occur remotely, and given that the exploit has been publicly disclosed, there is a heightened risk for affected systems. Adopting immediate protective measures is crucial to safeguard sensitive information.
Affected Version(s)
POS and Inventory Management System 1.0