CVE-2023-0918

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221494 is the identifier assigned to this vulnerability.

• CWE-434

• https://blog.0xgabe.com/?p=71Broken Link
• https://vuldb.com/?ctiid.221494Permissions Required, Third Party Advisory
• https://vuldb.com/?id.221494Third Party Advisory
• https://blog.0xgabe.com/?p=71Broken Link
• https://vuldb.com/?ctiid.221494Permissions Required, Third Party Advisory
• https://vuldb.com/?id.221494Third Party Advisory

Published

Feb 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0912A vulnerability classified as critical has been found in Sou…8.8
• CVE-2023-0913A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2023-0914Improper Authorization in GitHub repository pixelfed/pixelfe…5.3
• CVE-2023-0915A vulnerability classified as critical has been found in Sou…8.8
• CVE-2023-0916A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2023-0917A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-0919Missing Authentication for Critical Function in GitHub repos…3.5
• CVE-2023-0921A lack of length validation in GitLab CE/EE affecting all ve…4.3
• CVE-2023-0922The Samba AD DC administration tool, when operating against …5.9
• CVE-2023-0923A flaw was found in the Kubernetes service for notebooks in …9.8
• CVE-2023-0924The ZYREX POPUP WordPress plugin through 1.0 does not valida…7.2
• CVE-2023-0925Version 10.11 of webMethods OneData runs an embedded instanc…9.8