CVE-2026-3762

A vulnerability has been found in SourceCodester Client Database Management System 1.0/3.1. Impacted is an unknown function of the file /superadmin_delete_manager.php of the component Endpoint. The manipulation of the argument manager_id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2026-03-08

Last modified

2026-03-11

Weaknesses

CWE-266, CWE-285

Affected products

• Client Database Management System (Lerouxyxchire)
• Client Database Management System (Sourcecodester)

References

• https://gist.github.com/Adarshh-A/1aae387a3cf4ea05c871ddafc64d0348
• https://vuldb.com/?ctiid.349740
• https://vuldb.com/?id.349740
• https://vuldb.com/?submit.768122
• https://www.sourcecodester.com/