CVE-2023-2670

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/?page=user/manage_user. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228886 is the identifier assigned to this vulnerability.

• CWE-284

• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2670.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228886Third Party Advisory
• https://vuldb.com/?id.228886Third Party Advisory
• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2670.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228886Third Party Advisory
• https://vuldb.com/?id.228886Third Party Advisory

Published

May 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26688Cross Site Scripting (XSS) vulnerability in CS-Cart MultiVen…5.4
• CVE-2023-26689An issue discovered in CS-Cart MultiVendor 4.16.1 allows att…9.8
• CVE-2023-2669A vulnerability was found in SourceCodester Lost and Found I…9.8
• CVE-2023-26690File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allo…8.8
• CVE-2023-26691Directory Traversal vulnerability in CS-Cart MultiVendor 4.1…7.2
• CVE-2023-26692ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publicat…6.1
• CVE-2023-2671A vulnerability was found in SourceCodester Lost and Found I…6.1
• CVE-2023-2672A vulnerability classified as critical has been found in Sou…9.8
• CVE-2023-2673Improper Input Validation vulnerability in PHOENIX CONTACT F…5.3
• CVE-2023-26733Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows…7.8
• CVE-2023-26735blackbox_exporter v0.23.0 was discovered to contain an acces…7.5
• CVE-2023-2674Improper Access Control in GitHub repository openemr/openemr…4.3