CVE-2026-3761SourceCodester Client Database Management System Endpoint superadmin_user_delete.php improper authorization

Beschreibung

A flaw has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /superadmin_user_delete.php of the component Endpoint. Executing a manipulation of the argument user_id can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-349739 | SourceCodester Client Database Management System Endpoint superadmin_user_delete.php improper authorization vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-349739 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #768120 | SourceCodester Client Database Management System (CDMS) 1.0 Improper Authorization third-party-advisoryThird Party AdvisoryVDB Entry
• https://gist.github.com/Adarshh-A/dd8884d768d9dde9072fe5efce453824 exploitExploitThird Party Advisory
• https://www.sourcecodester.com/ productProduct