CVE-2024-9082 - SourceCodester Online Eyewear Shop Remote File Include Vulnerability (Authorization Bypass)

3 weeks ago 13
ARTICLE AD BOX
CVE ID : CVE-2024-9082
Published : Sept. 22, 2024, 8:15 a.m. | 25 minutes ago
Description : A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Users.phpf=save of the component User Creation Handler. The manipulation of the argument type with the input 1 leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read Entire Article