CNNVD-202511-2568 Information
CNNVD ID
CNNVD-202511-2568
Related CVE
- CNNVD Published: 2025-11-23
Description (Chinese)
SourceCodester Inventory Management System是SourceCodester开源的一个库存管理系统。 SourceCodester Inventory Management System 1.0版本存在授权问题漏洞，该漏洞源于文件/model/user/resetPassword.php中未知函数对参数的错误操作，可能导致弱密码恢复。
Description (English)
SourceCodester Inventory Management System is an inventory management system for the open source of SourceCodester. There is a mandate gap in Version 1.0 of SourceCodeCodery Management System, which stems from the error of unknown functions to parameters in file/model/user/resetPassword.php, which may lead to the restoration of weak passwords.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
SourceCodester
Published
2025-11-23
Last Modified
2026-02-24
References
https://vuldb.com/?id.333329 https://vuldb.com/?submit.697984 https://www.sourcecodester.com/ https://vuldb.com/?ctiid.333329 https://www.notion.so/Unauthenticated-Password-Reset-Vulnerability-in-SourceCodester-Inventory-Management-System-2b023917db8c8001b5ecf4c50a54dfbd?source=copy_link https://access.redhat.com/security/cve/cve-2025-13565
Share on: