CVE-2023-0998

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221733 was assigned to this vulnerability.

• CWE-284

• https://github.com/1MurasaKi/PaymentVul_report/blob/main/razormist/Alphaware%20-%20Simple%20E-Commerce%20System/payment_vulnerability.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.221733Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.221733Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/1MurasaKi/PaymentVul_report/blob/main/razormist/Alphaware%20-%20Simple%20E-Commerce%20System/payment_vulnerability.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.221733Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.221733Permissions Required, Third Party Advisory, VDB Entry

Published

Feb 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0992The Shield Security plugin for WordPress is vulnerable to st…6.1
• CVE-2023-0993The Shield Security plugin for WordPress is vulnerable to Mi…4.3
• CVE-2023-0994Exposure of Sensitive Information to an Unauthorized Actor i…7.5
• CVE-2023-0995Cross-site Scripting (XSS) - Stored in GitHub repository uni…5.4
• CVE-2023-0996 There is a vulnerability in the strided image data parsing …7.8
• CVE-2023-0997A vulnerability was found in SourceCodester Moosikay E-Comme…8.8
• CVE-2023-0999A vulnerability classified as problematic was found in Sourc…8.8
• CVE-2023-1000A vulnerability was found in cyanomiko dcnnt-py up to 0.9.0.…6.3
• CVE-2023-1001A vulnerability, which was classified as problematic, has be…5.3
• CVE-2023-1002A vulnerability, which was classified as problematic, has be…6.5
• CVE-2023-1003A vulnerability, which was classified as critical, was found…7.8
• CVE-2023-1004A vulnerability has been found in MarkText up to 0.17.1 on W…7.8