Description

A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the component Administration Backend. The manipulation results in improper authentication. The attack may be performed from remote. The exploit has been made public and could be used.

Related CPE's

a

fabian

online_product_reservation_system

1.0

Vulnerable

References

https://code-projects.org/

Product

https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/auth_bypass_admin_panel.md

ExploitThird Party Advisory

https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/auth_bypass_admin_panel.md#poc

ExploitThird Party Advisory

https://vuldb.com/?ctiid.339499

Permissions RequiredVDB Entry

https://vuldb.com/?id.339499

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.731127

Third Party AdvisoryVDB Entry

Weaknesses

[email protected]

Primary
CWE-287

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.3 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-05T13:15:55.457Z

1 week ago

Last modified

2026-01-09T15:05:04.390Z

6 days ago