CVE-2023-1460

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability.

• CWE-287

• https://vuldb.com/?ctiid.223305Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.223305Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.223305Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.223305Permissions Required, Third Party Advisory, VDB Entry

Published

Mar 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1454A vulnerability classified as critical has been found in jee…9.8
• CVE-2023-1455A vulnerability classified as critical was found in SourceCo…8.1
• CVE-2023-1456A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-1457A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-1458A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.…9.8
• CVE-2023-1459A vulnerability was found in SourceCodester Canteen Manageme…9.8
• CVE-2023-1461A vulnerability was found in SourceCodester Canteen Manageme…9.8
• CVE-2023-1462Authorization Bypass Through User-Controlled Key vulnerabili…8.8
• CVE-2023-1463Authorization Bypass Through User-Controlled Key in GitHub r…5.4
• CVE-2023-1464A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-1465The WP EasyPay WordPress plugin before 4.1 does not escape s…6.1
• CVE-2023-1466A vulnerability was found in SourceCodester Student Study Ce…6.3