CVE-2023-3599
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
A critical vulnerability was found in the Best Fee Management System version 1.0. The issue affects the save_user function in the admin_class.php file of the Add User Handler component, leading to improper access controls.
Risk Assessment
An attacker may remotely exploit this vulnerability, posing a serious threat to user data security and system integrity.
Recommendation
It is recommended to immediately update the system to the latest version to mitigate this vulnerability and implement additional security measures.
Original NVD description (English source)
A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function save_user of the file admin_class.php of the component Add User Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-233450 is the identifier assigned to this vulnerability.