CVE-2023-1858CWE-200

SourceCodester Earnings and Expense Tracker App index.php information disclosure

Medium · published April 5, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.2th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-04-05T08:00Z
EPSS history
Timeline
  • 05 APR 08:00Z
    SourceCodester Earnings and Expense Tracker App index.php information disclosure
    cvelistv5