Описание
A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown part of the file /admin/delete-session.php. The manipulation of the argument ID leads to missing authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Ссылки
EPSS
Процентиль: 24%
0.00325
Низкий
6.5 Medium
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 6.5
github
2 месяца назад
A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown part of the file /admin/delete-session.php. The manipulation of the argument ID leads to missing authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
EPSS
Процентиль: 24%
0.00325
Низкий
6.5 Medium
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-862