Simple Cafe Billing System
Monthly
Improper authorization in SourceCodester Simple Cafe Billing System 1.0 allows remote unauthenticated attackers to manipulate the 'Type' parameter in the save_user action of admin_class.php, enabling unauthorized modification of user roles within the User Management component. The vulnerability is network-exploitable (CVSS 4.0 base 5.5, CVSS 3.1 AV:N/AC:L/PR:N/UI:N) with no authentication or user interaction required, and publicly available exploit code exists; active exploitation has not been confirmed (not in CISA KEV). The application's narrow deployment footprint limits real-world exposure.
A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Improper authorization in SourceCodester Simple Cafe Billing System 1.0 allows remote unauthenticated attackers to manipulate the 'Type' parameter in the save_user action of admin_class.php, enabling unauthorized modification of user roles within the User Management component. The vulnerability is network-exploitable (CVSS 4.0 base 5.5, CVSS 3.1 AV:N/AC:L/PR:N/UI:N) with no authentication or user interaction required, and publicly available exploit code exists; active exploitation has not been confirmed (not in CISA KEV). The application's narrow deployment footprint limits real-world exposure.
A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.