Dashboard / CVE-2023-0785

CVE-2023-0785

LOW
INFO Priority: 0.03 BB Relevance: 58/100
Published: 2023-02-12 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Network No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220645 was assigned to this vulnerability.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
mayurik best_online_news_portal 1.0

References & Advisories (3)

https://vuldb.com/?id.220645
Third Party Advisory
https://vuldb.com/?ctiid.220645
Permissions Required Third Party Advisory

Bug Bounty Relevance

58 / 100
✓ Network accessible
✓ No authentication
✓ No user interaction

CVSS Score

3.7 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.85%
Raw Score 0.008510
Percentile 58.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00851
2026-10-28
0.00851

Intelligence Sources

nvd ref →

External Links