Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/sajaljat/cve-2023-46449
Vulnerability AnalysisWeb Application ExploitationPenetration TestingAuthenticationMisconfigurationLearning & Education
GitHubsajaljat/cve-2023-46449

CVE-2023-46449

Proof-of-concept exploit for CVE-2023-46449: IDOR in Sourcecodester inventory management system v1.0 password change function enabling remote account takeover.

View Repository
12 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-46449

Incorrect Access Control

VIDEO POC LINK https://www.youtube.com/watch?v=H5QnsOKjs3s

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.

STEPS TO REPRODUCE

1 Login to the user 1 2 visit the password change function. 3 configue the proxy with burp suit to intercept the request. 4 Send the password change request, and intercept the request and manupulate the user id to change another user password. 5. Forward the request and turn of the intercept. 6. Login to the other user with new password. 7. Observe that the account is successfully compromized.

Affected Component Password change Functionality

Attack Type] Remote

CVE Impact Other Account Takeover

Attack Vectors victim id is need which is easily enumerable.

Reference https://youtu.be/H5QnsOKjs3s

Discoverer Sajal Jat

Download Tool