CVE-2023-4749

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Sep 4, 2023
Updated: May 17, 2024
CWE ID 73

Summary

CVE-2023-4749 is a critical vulnerability discovered in the SourceCodester Inventory Management System 1.0. An unknown function of the file index.php contains the issue, which allows for remote file inclusion via manipulation of the argument page. This vulnerability, identified as VDB-238638, has been disclosed to the public and may be actively exploited.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share