CVE-2023-3018

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/?page=user/list. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230362 is the identifier assigned to this vulnerability.

• CWE-284

• https://medium.com/@akashpandey380/lost-and-found-information-system-v1-0-idor-cve-2023-977966c4450dExploit, Third Party Advisory
• https://vuldb.com/?ctiid.230362Third Party Advisory
• https://vuldb.com/?id.230362Third Party Advisory
• https://medium.com/@akashpandey380/lost-and-found-information-system-v1-0-idor-cve-2023-977966c4450dExploit, Third Party Advisory
• https://vuldb.com/?ctiid.230362Third Party Advisory
• https://vuldb.com/?id.230362Third Party Advisory

Published

May 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30154Multiple improper neutralization of SQL parameters in module…9.8
• CVE-2023-3016A vulnerability was found in yiwent Vip Video Analysis 1.0 a…6.1
• CVE-2023-3017A vulnerability was found in SourceCodester Lost and Found I…5.4
• CVE-2023-30172A directory traversal vulnerability in the /get-artifact API…7.5
• CVE-2023-30177CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An…6.1
• CVE-2023-30179CraftCMS version 3.7.59 is vulnerable to Server-Side Templat…7.2
• CVE-2023-30183Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2023-30184A stored cross-site scripting (XSS) vulnerability in Typecho…5.4
• CVE-2023-30185CRMEB v4.4 to v4.6 was discovered to contain an arbitrary fi…9.8
• CVE-2023-30186A use after free issue discovered in ONLYOFFICE DocumentServ…9.8
• CVE-2023-30187An out of bounds memory access vulnerability in ONLYOFFICE D…9.8
• CVE-2023-30188Memory Exhaustion vulnerability in ONLYOFFICE Document Serve…7.5