CVE-2023-1464: high-severity vulnerability in SourceCodester Medicine Tracker System
SourceCodester Medicine Tracker System improper authentication
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.3epss 0.8%
A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=save_user. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223311.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Medicine Tracker SystemRelated CVEs — SourceCodester Medicine Tracker System
In the same product, most dangerous first.
CVE-2023-1439MEDIUMSourceCodester Medicine Tracker System GET Parameter view_details.php sql injectionEPSS 0.8%CVE-2024-6419MEDIUMSourceCodester Medicine Tracker System sql injectionEPSS 0.6%CVE-2023-5581LOWSourceCodester Medicine Tracker System index.php cross site scriptingEPSS 0.6%CVE-2024-6418MEDIUMSourceCodester Medicine Tracker System sql injectionEPSS 0.5%CVE-2024-7226MEDIUMSourceCodester Medicine Tracker System Password Change cross-site request forgeryEPSS 0.4%CVE-2023-1447LOWSourceCodester Medicine Tracker System cross site scriptingEPSS 0.4%