A critical vulnerability in SourceCodester Client Database Management System allows unauthenticated attackers to perform unauthorized administrative actions and access sensitive data.

The application suffers from multiple broken access control vulnerabilities, specifically improper authorization and insecure direct object references, which allow unauthenticated remote attackers to interact with sensitive endpoints such as /fetch_manager_details.php, /superadmin_delete_manager.php, and /superadmin_sales_agent_create.php.

The vulnerability allows for complete bypass of authentication mechanisms, enabling an attacker to delete managers, create unauthorized internal records, and exfiltrate sensitive data. Given the CVSS score of 7.3, and research indicating the potential for full system state manipulation, the business impact includes severe risk of data loss, unauthorized administrative access, and potential total system compromise.

Immediate Action: As no vendor patch is currently available, administrators must restrict network access to the application endpoints immediately or take the service offline until a secure version is released.

Proactive Monitoring: Review web server access logs for anomalous requests to the identified PHP endpoints, particularly unauthorized POST requests to administrative scripts.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block unauthorized access attempts to the /cdm/ directory and specifically filter traffic targeting the identified administrative PHP files.

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the security research write-up hosted on GitHub.

Due to the lack of a vendor-supplied patch and the availability of a public proof-of-concept, this vulnerability poses a significant and immediate risk. Organizations using this software should prioritize network isolation of the affected system and implement strict access controls until the vendor provides a secure update.