Description
A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Inventory Management System | 1.0 | — |
References
- VDB-333329 | SourceCodester Inventory Management System resetPassword.php password recovery vdb-entry
- VDB-333329 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #697984 | SourceCodester Inventory Management System 1.0 Business Logic Errors third-party-advisory
- https://www.notion.so/Unauthenticated-Password-Reset-Vulnerability-in-SourceCodester-Inventory-Management-System-2b023917db8c8001b5ecf4c50a54dfbd?source=copy_link exploit
- https://www.sourcecodester.com/ product