CVE-2023-1557

A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ecommerce/admin/user/controller.php?action=edit of the component Username Handler. The manipulation of the argument USERID leads to improper access controls. The attack may be launched remotely. VDB-223550 is the identifier assigned to this vulnerability.

• CWE-284

• https://vuldb.com/?ctiid.223550Third Party Advisory
• https://vuldb.com/?id.223550Third Party Advisory
• https://vuldb.com/?ctiid.223550Third Party Advisory
• https://vuldb.com/?id.223550Third Party Advisory

Published

Mar 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1549The Ad Inserter WordPress plugin before 2.7.27 unserializes …7.2
• CVE-2023-1550Insertion of Sensitive Information into log file vulnerabili…5.5
• CVE-2023-1552ToolboxST prior to version 7.10 is affected by a deserializa…7.8
• CVE-2023-1554The Quick Paypal Payments WordPress plugin before 5.7.26.4 d…4.8
• CVE-2023-1555An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-1556A vulnerability was found in SourceCodester Judging Manageme…9.8
• CVE-2023-1558A vulnerability classified as critical has been found in Sim…9.8
• CVE-2023-1559A vulnerability classified as problematic was found in Sourc…7.2
• CVE-2023-1560A vulnerability, which was classified as problematic, has be…5.5
• CVE-2023-1561A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-1562Mattermost fails to check the "Show Full Name" setting when …4.3
• CVE-2023-1563A vulnerability has been found in SourceCodester Student Stu…9.8