{"id":"CVE-2023-1858","state":"PUBLISHED","title":"SourceCodester Earnings and Expense Tracker App index.php information disclosure","description":"A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.","publishedAt":"2023-04-05T08:00:08.756Z","updatedAt":"2024-08-02T06:05:26.698Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Earnings and Expense Tracker App"],"affected":[{"vendor":"SourceCodester","product":"Earnings and Expense Tracker App","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.224997","https://vuldb.com/?ctiid.224997"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/1xxx/CVE-2023-1858.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-1858","state":"PUBLISHED","datePublished":"2023-04-05T08:00:08.756Z","dateUpdated":"2024-08-02T06:05:26.698Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2023-04-05T06:04:02.882Z"},"containers":{"cna":{"title":"SourceCodester Earnings and Expense Tracker App index.php information disclosure","descriptions":[{"lang":"en","value":"A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability."},{"lang":"de","value":"Es wurde eine Schwachstelle in SourceCodester Earnings and Expense Tracker App 1.0 ausgemacht. Sie wurde als problematisch eingestuft. Es geht dabei um eine nicht klar definierte Funktion der Datei index.php. Durch die Manipulation des Arguments page mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren."}],"affected":[{"vendor":"SourceCodester","product":"Earnings and Expense Tracker App","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.224997","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.224997","tags":["signature"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"CWE-200 Information Disclosure"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2023-10-22T06:20:54.333Z"},"timeline":[{"time":"2023-04-05T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2023-04-05T00:00:00.000Z","lang":"en","value":"CVE reserved"},{"time":"2023-04-05T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2023-04-22T16:16:58.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"aallll (VulDB User)","type":"analyst"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.224997","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.224997","tags":["signature","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T06:05:26.698Z"}}]}}}