CVE-2026-14693: SourceCodester Multi-Vendor Online Grocery Management

Описание

Оригинално описание

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master.php. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used.

Засегнати продукти

• SourceCodester Multi-Vendor Online Grocery Management System: 1.0

Вид слабост

• CWE-285 Неправилна авторизация
• CWE-266 Неправилно задаване на привилегии

История

Други уязвимости в SourceCodester Multi-Vendor Online Grocery Management System

• 7.3CVE-2026-14695
• 6.3CVE-2026-14694
• 6.3CVE-2026-14692
• 6.3CVE-2026-14691
• 7.3CVE-2026-14690

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-14693
• https://nvd.nist.gov/vuln/detail/CVE-2026-14693
• https://vuldb.com/vuln/376289
• https://vuldb.com/vuln/376289/cti
• https://vuldb.com/cve/CVE-2026-14693
• https://vuldb.com/submit/846833
• https://github.com/lee945/cve/issues/4
• https://www.sourcecodester.com/