CVE-2026-90697 — 神龙十问 AI 深度分析摘要

🚨 **The Bug**: `invoice.php` in SourceCodester IMS 1.0 🔍 **The Flaw**: **Authorization Bypass** via `ID` parameter 💥 **The Impact**: Remote attackers can access invoice data without proper permission checks 📉 **CVSS**: 3…

🧩 **CWE**: Missing Authorization Check 🛠️ **The Flaw**: The `ID` parameter is not validated against user permissions 📝 **Detail**: `invoice.php` fails to verify if the user has rights to view the specific invoice ID 🔗 **…

📦 **Product**: SourceCodester Inventory Management System (IMS) 🏷️ **Version**: 1.0 🌐 **Component**: `invoice.php` 📍 **Location**: SourceCodester PHP-based inventory tool

👀 **Access**: View invoice details (Confidentiality impact) 🔐 **Privilege**: Low (PR:L) - requires basic user login 📊 **Data**: Invoice records, financial details 🚫 **No Integrity**: No modification risk (I:N)

📉 **Threshold**: LOW (AC:L) 🔑 **Auth**: Requires low-level user account (PR:L) 🌍 **Reach**: Remote (AV:N) ⚡ **Effort**: Easy to exploit via URL manipulation of `ID`

✅ **Public Exp**: YES 📄 **PoC**: Available on GitHub Gist (fhewm98) 🔥 **Wild**: Possibly exploited in the wild 📅 **Status**: Exploit code is public and ready to use

🔍 **Check**: Scan `invoice.php` for missing auth checks 🧪 **Test**: Try accessing `invoice.php?…

🛡️ **Official Patch**: Not explicitly mentioned in data 🔧 **Mitigation**: Add authorization check before processing `ID` 📦 **Update**: Check SourceCodester for a newer version 📝 **Note**: No official patch listed in the …

🛑 **Workaround**: Restrict access to `invoice.php` via web server config 🔒 **IP Filter**: Limit access to trusted IPs 👥 **Role**: Assign specific roles for invoice viewing 📝 **Code**: Manually add auth check in `invoice.…

⏱️ **Urgency**: MEDIUM-LOW 📊 **CVSS**: Low (C:L, I:N, A:N) 🔥 **Risk**: Public exploit + possible wild exploitation ✅ **Action**: Patch or mitigate soon, but not critical