title: SourceCodester Inventory Management System Password edit_update.php access control
description: A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit_update.php of the component Password Handler. The manipulation of the argument user_id leads to improper access controls. The attack can be initiated remotely. VDB-236218 is the identifier assigned to this vulnerability.
problem types: CWE-284 Improper Access Controls
affected:
{
vendor: SourceCodester
product: Inventory Management System
versions:
version: 1.0, status: affected
modules: Password Handler
}
metrics:
cvssV3_1: [
version: 3.1
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
baseSeverity: MEDIUM
]