CVE-2023-2345

A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=delete_inquiry. The manipulation leads to improper authorization. The attack may be launched remotely. The identifier of this vulnerability is VDB-227588.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@vuldb.com

Published

2023-04-27

Last modified

2025-01-30

Weaknesses

CWE-285

Affected products

• Service Provider Management System (Oretnom23)
• Service Provider Management System (Sourcecodester)

References

• https://vuldb.com/?ctiid.227588
• https://vuldb.com/?id.227588