CVE-2023-1432

A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be launched remotely. VDB-223214 is the identifier assigned to this vulnerability.

• CWE-284

• https://vuldb.com/?ctiid.223214Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223214Third Party Advisory
• https://vuldb.com/?ctiid.223214Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223214Third Party Advisory

Published

Mar 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1426The WP Tiles WordPress plugin through 1.1.2 does not ensure …6.5
• CVE-2023-1427- The Photo Gallery by 10Web WordPress plugin before 1.8.15 …4.9
• CVE-2023-1428There exists an vulnerability causing an abort() to be calle…7.5
• CVE-2023-1429Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
• CVE-2023-1430The FluentCRM - Marketing Automation For WordPress plugin f…6.5
• CVE-2023-1431The WP Simple Shopping Cart plugin for WordPress is vulnerab…5.3
• CVE-2023-1433A vulnerability was found in SourceCodester Gadget Works Onl…7.2
• CVE-2023-1435The Ajax Search Pro WordPress plugin before 4.26.2 does not …6.1
• CVE-2023-1436An infinite recursion is triggered in Jettison when construc…7.5
• CVE-2023-1437All versions prior to 9.1.4 of Advantech WebAccess/SCADA are…9.8
• CVE-2023-1439A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-1440A vulnerability, which was classified as critical, was found…8.8