CVE-2023-1460CWE-287

SourceCodester Online Pizza Ordering System Password Change improper authentication

Medium · published March 17, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00971 · 61.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-03-17T07:51Z
EPSS history
Timeline
  • 17 MAR 07:51Z
    SourceCodester Online Pizza Ordering System Password Change improper authentication
    cvelistv5