CVE-2023-4183

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit_update.php of the component Password Handler. The manipulation of the argument user_id leads to improper access controls. The attack can be initiated remotely. VDB-236218 is the identifier assigned to this vulnerability.

• CWE-284

• https://vuldb.com/?ctiid.236218Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.236218Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.236218Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.236218Permissions Required, Third Party Advisory, VDB Entry

Published

Aug 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41824 An implicit intent vulnerability was reported in the Motoro…2.8
• CVE-2023-41825 A path traversal vulnerability was reported in the Motorola…2.8
• CVE-2023-41826A PendingIntent hijacking vulnerability in Motorola Device H…5.1
• CVE-2023-41827An improper export vulnerability was reported in the Motorol…5.1
• CVE-2023-41828 An implicit intent export vulnerability was reported in the…4.4
• CVE-2023-41829An improper export vulnerability was reported in the Motorol…5
• CVE-2023-41830 An improper absolute path traversal vulnerability was repor…6.5
• CVE-2023-41833A race condition in UEFI firmware for some Intel(R) processo…8.7
• CVE-2023-41834Improper Neutralization of CRLF Sequences in HTTP Headers in…6.1
• CVE-2023-41835When a Multipart request is performed but some of the fields…7.5
• CVE-2023-41836An improper neutralization of input during web page generati…6.1
• CVE-2023-41838An improper neutralization of special elements used in an os…7.1