CVE-2023-1826

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-224841 was assigned to this vulnerability.

• CWE-434
• CWE-434

• http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.224841Permissions Required, Third Party Advisory
• https://vuldb.com/?id.224841Third Party Advisory
• http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.224841Permissions Required, Third Party Advisory
• https://vuldb.com/?id.224841Third Party Advisory

Published

Apr 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1819Out of bounds read in Accessibility in Google Chrome prior t…6.5
• CVE-2023-1820Heap buffer overflow in Browser History in Google Chrome pri…8.8
• CVE-2023-1821Inappropriate implementation in WebShare in Google Chrome pr…6.5
• CVE-2023-1822Incorrect security UI in Navigation in Google Chrome prior t…6.5
• CVE-2023-1823Inappropriate implementation in FedCM in Google Chrome prior…6.5
• CVE-2023-1825An issue has been discovered in GitLab EE affecting all vers…4.3
• CVE-2023-1827A vulnerability has been found in SourceCodester Centralized…9.8
• CVE-2023-1829A use-after-free vulnerability in the Linux Kernel traffic c…7.8
• CVE-2023-1831Mattermost fails to redact from audit logs the user password…7.5
• CVE-2023-1832An improper access control flaw was found in Candlepin. An a…8.1
• CVE-2023-1833Authentication Bypass by Primary Weakness vulnerability in D…9.8
• CVE-2023-1834 Rockwell Automation was made aware that Kinetix 5500 drives…9.1