CVE-2026-86293: SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication
A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue can be exploited remotely and does not require prior authentication or user interaction. An attacker can manipulate the ID argument sent to the delete-user.php endpoint.
What is the likely impact of successful exploitation?
Successful exploitation can result in unauthorized deletion through the affected deletion endpoint. The supplied severity metrics indicate integrity and availability impact, with no stated confidentiality impact.
Is exploit code available?
Yes. The available data states that an exploit has been published and may be used.
Which version is identified as affected?
The affected product version identified in the available data is SourceCodester Simple Traffic Offense System 1.0.