CVE-2023-4749: SourceCodester Inventory Management System index.php file inclusion
First published: Mon Sep 04 2023(Updated: )
A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238638 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mayurik Inventory Management System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-4749?
The severity of CVE-2023-4749 is critical (9.8).
What is CVE-2023-4749?
CVE-2023-4749 is a critical vulnerability in SourceCodester Inventory Management System 1.0 that allows remote file inclusion.
How does CVE-2023-4749 affect SourceCodester Inventory Management System?
CVE-2023-4749 affects SourceCodester Inventory Management System 1.0 by allowing remote attackers to manipulate the 'page' argument and perform file inclusion attacks.
Is there a fix for CVE-2023-4749?
No official fix is available for CVE-2023-4749 at the moment. It is recommended to apply any security patches or updates provided by the vendor when they become available.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-4749?
The Common Weakness Enumeration (CWE) ID for CVE-2023-4749 is CWE-73 (External Control of File Name or Path).
- collector/nvd-index
- agent/author
- agent/type
- agent/references
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/severity
- agent/title
- agent/event
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- vendor/mayurik
- canonical/mayurik inventory management system
- version/mayurik inventory management system/1.0