CVE-2023-6773

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accounts_con/register_account of the component User Creation Handler. The manipulation of the argument account_type with the input Admin leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247909 was assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-67745.4A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is someCVE-2023-67756.1A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknoCVE-2023-67765.4The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Ready Function’ field in all versions up to, and CVE-2023-67776.5The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and incCVE-2023-67785.4Cross-site Scripting (XSS) - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0.CVE-2023-67797.5An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the sCVE-2023-67805.3An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog funCVE-2023-67815.4The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom fields in all versions CVE-2023-67825.4The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) inCVE-2023-67834.8The WolfNet IDX for WordPress plugin through 1.19.1 does not sanitise and escape some of its settings, which could allow high privilege userCVE-2023-67844.3A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.CVE-2023-67855.3The Download Manager plugin for WordPress is vulnerable to unauthorized file download of files added via the plugin in all versions up to, a