CVE-2023-31704

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Jul 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-317055.4A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malic CVE-2023-317079.8SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php.CVE-2023-317084.3A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to CVE-2023-31717.5A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on CVE-2023-317109.8TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow.CVE-2023-317149.8Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.CVE-2023-317167.5FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log CVE-2023-317177.5A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.CVE-2023-317187.5FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.CVE-2023-317199.8FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.CVE-2023-31727.2Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.CVE-2023-317227.8There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).