CVE-2023-0916: A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php....

Summary

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
auto_dealer_management_system_project	auto_dealer_management_system	1.0 `cpe:2.3:a:auto_dealer_management_system_project:auto_dealer_management_system:1.0:::::::*`

Original advisory text

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php....

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221491.

References

https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Managem... Exploit Third Party Advisory
https://vuldb.com/?ctiid.221491 Permissions Required Third Party Advisory
https://vuldb.com/?id.221491 Third Party Advisory