CVE-2023-4749: SourceCodester Inventory Management System index.php file inclusion
A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238638 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4749?
The severity of CVE-2023-4749 is critical (9.8).
What is CVE-2023-4749?
CVE-2023-4749 is a critical vulnerability in SourceCodester Inventory Management System 1.0 that allows remote file inclusion.
How does CVE-2023-4749 affect SourceCodester Inventory Management System?
CVE-2023-4749 affects SourceCodester Inventory Management System 1.0 by allowing remote attackers to manipulate the 'page' argument and perform file inclusion attacks.
Is there a fix for CVE-2023-4749?
No official fix is available for CVE-2023-4749 at the moment. It is recommended to apply any security patches or updates provided by the vendor when they become available.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-4749?
The Common Weakness Enumeration (CWE) ID for CVE-2023-4749 is CWE-73 (External Control of File Name or Path).