CVE-2026-14690: SourceCodester Multi-Vendor Online Grocery Management

Описание

Оригинално описание

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Засегнати продукти

• SourceCodester Multi-Vendor Online Grocery Management System: 1.0

Вид слабост

• CWE-285 Неправилна авторизация
• CWE-266 Неправилно задаване на привилегии

История

Други уязвимости в SourceCodester Multi-Vendor Online Grocery Management System

• 7.3CVE-2026-14695
• 6.3CVE-2026-14694
• 5.4CVE-2026-14693
• 6.3CVE-2026-14692
• 6.3CVE-2026-14691

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-14690
• https://nvd.nist.gov/vuln/detail/CVE-2026-14690
• https://vuldb.com/vuln/376286
• https://vuldb.com/vuln/376286/cti
• https://vuldb.com/cve/CVE-2026-14690
• https://vuldb.com/submit/846830
• https://github.com/lee945/cve/issues/1
• https://www.sourcecodester.com/