| Titolo | SourceCodester Inventory Management System 1.0 Business Logic Errors |
|---|
| Descrizione | A critical vulnerability exists in the password reset functionality of the SourceCodester Inventory Management System. An unauthenticated attacker can reset the password of any user—including administrator accounts—without verification. This leads to complete account takeover and full system compromise. |
|---|
| Fonte | ⚠️ https://www.notion.so/Unauthenticated-Password-Reset-Vulnerability-in-SourceCodester-Inventory-Management-System-2b023917db8c8001b5ecf4c50a54dfbd?source=copy_link |
|---|
| Utente | Amit_singh (UID 92775) |
|---|
| Sottomissione | 19/11/2025 07:58 (9 mesi fa) |
|---|
| Moderazione | 22/11/2025 18:33 (3 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 333329 [SourceCodester Inventory Management System 1.0 resetPassword.php escalationi di privilegi] |
|---|
| Punti | 14 |
|---|