CVE-2023-4183
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A vulnerability has been found in SourceCodester Inventory Management System 1.0 affecting unknown code of the file edit_update.php of the Password Handler component. Manipulation of the argument user_id leads to improper access controls.
Risk Assessment
An attacker can remotely exploit this vulnerability, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to update the system to the latest version and implement additional security measures to protect against unauthorized access.
Original NVD description (English source)
A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit_update.php of the component Password Handler. The manipulation of the argument user_id leads to improper access controls. The attack can be initiated remotely. VDB-236218 is the identifier assigned to this vulnerability.