PT-2023-31252

CVE-2023-49543

Published

2023-12-20

Updated

2024-08-28

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Book Store Management System version v1

Description The issue allows attackers to access unauthorized pages and execute administrative functions without authenticating, due to incorrect access control.

Recommendations For Book Store Management System version v1, update the access control mechanism to properly authenticate and authorize users before allowing access to administrative functions and pages.

Exploitability

Exploit

Fix

Impacts

Researchers

Geraldo Alcântara

Geraldoalcantara

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers