| Title | SourceCodester Inventory Management System 1.0 Business Logic Errors |
|---|
| Description | A critical vulnerability exists in the password reset functionality of the SourceCodester Inventory Management System. An unauthenticated attacker can reset the password of any user—including administrator accounts—without verification. This leads to complete account takeover and full system compromise. |
|---|
| Source | ⚠️ https://www.notion.so/Unauthenticated-Password-Reset-Vulnerability-in-SourceCodester-Inventory-Management-System-2b023917db8c8001b5ecf4c50a54dfbd?source=copy_link |
|---|
| User | Amit_singh (UID 92775) |
|---|
| Submission | 11/19/2025 07:58 (9 months ago) |
|---|
| Moderation | 11/22/2025 18:33 (3 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 333329 [SourceCodester Inventory Management System 1.0 resetPassword.php password recovery] |
|---|
| Points | 14 |
|---|