CVE-2023-4868

A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239353 was assigned to this vulnerability.

• CWE-352

• https://skypoc.wordpress.com/2023/09/05/vuln1/Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.239353Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239353Third Party Advisory
• https://skypoc.wordpress.com/2023/09/05/vuln1/Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.239353Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239353Third Party Advisory

Published

Sep 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48671 Dell vApp Manager, versions prior to 9.2.4.x contain an inf…7.5
• CVE-2023-48674Dell Platform BIOS contains an Improper Null Termination vul…4.9
• CVE-2023-48676Sensitive information disclosure and manipulation due to mis…7.1
• CVE-2023-48677Local privilege escalation due to DLL hijacking vulnerabilit…7.8
• CVE-2023-48678Sensitive information disclosure due to insecure folder perm…5.5
• CVE-2023-48679Stored cross-site scripting (XSS) vulnerability due to missi…5.4
• CVE-2023-48680Sensitive information disclosure due to excessive collection…5.5
• CVE-2023-48681Self cross-site scripting (XSS) vulnerability in storage nod…6.1
• CVE-2023-48682Stored cross-site scripting (XSS) vulnerability in unit name…5.4
• CVE-2023-48683Sensitive information disclosure and manipulation due to mis…7.1
• CVE-2023-48684Sensitive information disclosure and manipulation due to mis…7.1
• CVE-2023-48685Railway Reservation System v1.0 is vulnerable to multiple Un…9.8