CVE-2024-46293

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether the user is logged in as an admin or even check for a session token at all.

• CWE-306

• https://github.com/bunyamindemir/vulnerability-disclosures/blob/main/omos-authorization-bypass.mdMitigation, Third Party Advisory

Published

Sep 30, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-46274cute_png v1.05 was discovered to contain a heap buffer overf…7.8
• CVE-2024-46276cute_png v1.05 was discovered to contain a heap buffer overf…7.8
• CVE-2024-46278Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via t…8.4
• CVE-2024-46280PIX-LINK LV-WR22 RE3002-P1-01_V117.0 is vulnerable to Improp…8.8
• CVE-2024-4629A vulnerability was found in Keycloak. This flaw allows atta…6.5
• CVE-2024-46292A buffer overflow in modsecurity v3.0.12 allows attackers to…7.5
• CVE-2024-4630The Starter Templates — Elementor, WordPress & Beaver Builde…6.4
• CVE-2024-46300itsourcecode Placement Management System 1.0 is vulnerable t…6.1
• CVE-2024-46304A NULL pointer dereference in libcoap v4.3.5-rc2 and below a…7.5
• CVE-2024-46307A loop hole in the payment logic of Sparkshop v1.16 allows a…7.5
• CVE-2024-4631Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-46310Incorrect Access Control in Cfx.re FXServer v9601 and earlie…9.1