CVE-2023-0998

Katalog CVE

CVSS 5.3 · Medium EPSS 0,91%

Kerentanan Improper Access Control pada alphaware simple e-commerce system project alphaware simple e-commerce system. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221733 was assigned to this vulnerability.

Rincian

Terbit di NVD

24 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,91% peluang dieksploitasi; lebih tinggi dari 59,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/1MurasaKi/PaymentVul_report/blob/main/razormist/Alphaware%20-%20Simple%20E-Commerce%20Syste... exploit · advisory pihak ketiga
• https://vuldb.com/?ctiid.221733 permissions required · advisory pihak ketiga · vdb entry
• https://vuldb.com/?id.221733 permissions required · advisory pihak ketiga · vdb entry