CVE-2023-6099

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-245061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-269

• https://github.com/gatsby2003/Shenzhen-Youkate-Industrial-Co.-Ltd/blob/main/Shenzhen%20Youkate%20Industrial%20Co.%2C%20Ltd.mdThird Party Advisory
• https://vuldb.com/?ctiid.245061Permissions Required, Third Party Advisory
• https://vuldb.com/?id.245061Third Party Advisory
• https://github.com/gatsby2003/Shenzhen-Youkate-Industrial-Co.-Ltd/blob/main/Shenzhen%20Youkate%20Industrial%20Co.%2C%20Ltd.mdThird Party Advisory
• https://vuldb.com/?ctiid.245061Permissions Required, Third Party Advisory
• https://vuldb.com/?id.245061Third Party Advisory

Published

Nov 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6093A clickjacking vulnerability has been identified in OnCell G…6.1
• CVE-2023-6094A vulnerability has been identified in OnCell G3150A-LTE Ser…5.3
• CVE-2023-6095 Vladimir Kononovich, a Security Researcher has found a flaw…8.9
• CVE-2023-6096 Vladimir Kononovich, a Security Researcher has found a flaw…7.4
• CVE-2023-6097A SQL injection vulnerability has been found in ICS Business…8.8
• CVE-2023-6098An XSS vulnerability has been discovered in ICS Business Man…6.1
• CVE-2023-6100A vulnerability classified as problematic was found in Maiwe…5.3
• CVE-2023-6101A vulnerability, which was classified as problematic, has be…7.5
• CVE-2023-6102A vulnerability, which was classified as problematic, was fo…9.8
• CVE-2023-6103A vulnerability has been found in Intelbras RX 1500 1.1.9 an…5.4
• CVE-2023-6104Rejected reason: The CVE Record was published by accident.
• CVE-2023-6105An information disclosure vulnerability exists in multiple M…5.5