CVE-2026-3734 in Client Database Management System

Zusammenfassung

von MITRE • 08.03.2026

A flaw has been found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /fetch_manager_details.php of the component Endpoint. This manipulation of the argument manager_id causes improper authorization. The attack can be initiated remotely. The exploit has been published and may be used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Zuständig: VulDB
• Veröffentlichung: 08.03.2026
• Moderieren: akzeptiert
• Eintrag: VDB-349712
• CPE: bereit
• CWE: CWE-285 (bestätigt)
• Exploit: Download
• CVSS: 7.3 (CNA)
• EPSS: 0.00364
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-3734
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-3734
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-3734/