CVE-2026-3734: falha de média gravidade em SourceCodester Client Database Management System
SourceCodester Client Database Management System Endpoint fetch_manager_details.php improper authorization
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A flaw has been found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /fetch_manager_details.php of the component Endpoint. This manipulation of the argument manager_id causes improper authorization. The attack can be initiated remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
SourceCodester · Client Database Management SystemCVEs relacionadas — SourceCodester Client Database Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-5299MEDIUMSourceCodester Client Database Management System user_order_customer_update.php unrestricted uploadEPSS 0.7%CVE-2025-6160MEDIUMSourceCodester Client Database Management System user_customer_create_order.php sql injectionEPSS 0.6%CVE-2025-5002MEDIUMSourceCodester Client Database Management System user_proposal_update_order.php sql injectionEPSS 0.6%CVE-2025-4909MEDIUMSourceCodester Client Database Management System exposure of information through directory listingEPSS 0.6%CVE-2026-3762MEDIUMSourceCodester Client Database Management System Endpoint superadmin_delete_manager.php improper authorizationEPSS 0.5%CVE-2025-4923MEDIUMSourceCodester Client Database Management System user_delivery_update.php unrestricted uploadEPSS 0.5%