LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-3734 - Vulnerability Analysis

HighCVSS: 7.3

Last Updated: March 9, 2026

SourceCodester Client Database Management System - Broken Access Control

Published: March 8, 2026Updated: March 9, 2026PoC AvailableRemote Exploitable

Overview

SourceCodester Client Database Management System 1.0 contains a broken access control caused by improper authorization in /fetch_manager_details.php, letting remote attackers access unauthorized data, exploit requires no special privileges.

Severity & Score

Severity: High
CVSS Score: 7.3

Impact

Remote attackers can access or manipulate unauthorized data, potentially compromising sensitive information.

Mitigation

Update to the latest version.

Details

CVE ID
CVE-2026-3734
Severity
High
CVSS Score
7.3
Type
broken_access_control
Status
confirmed

CWE

  • CWE-266

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L