A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save of the component User Creation Handler. The manipulation of the argument Type with the input 1 leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
| Link | Tags |
|---|---|
| https://vuldb.com/?id.278252 | third party advisory vdb entry vendor advisory technical description |
| https://vuldb.com/?ctiid.278252 | vendor advisory signature third party advisory permissions required |
| https://vuldb.com/?submit.411565 | third party advisory vendor advisory |
| https://github.com/41lai/cve/blob/main/add.md | third party advisory exploit |
| https://www.sourcecodester.com/ | product |