CVE-2026-109605

Publié : 13 octobre 2026

Modifié : 13 octobre 2026

Score CVSS

7.3

HIGH

Description détaillée

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://tracexlabs.com/releases/billing-preauth-admin.html https://vuldb.com/cve/CVE-2026-109605 https://vuldb.com/submit/1000551 https://vuldb.com/vuln/417228 https://vuldb.com/vuln/417228/cti https://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-97844

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

VOIR DÉTAILS

CVE-2026-97843

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

VOIR DÉTAILS

CVE-2026-97842

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

VOIR DÉTAILS