Title | itwanger paicoding 1.0.3 Logical loopholes 2 |
---|
Description | In Paicoding system v1.0.3, by modifying the interface of one's own article and changing the article ID to someone else's, it is possible to move someone else's article to one's own management, and at the same time, someone else's article will be deleted. Hackers can exploit this vulnerability to delete someone else's article |
---|
Source | ⚠️ https://github.com/uglory-gll/javasec/blob/main/paicoding.md |
---|
User | uglory (UID 82151) |
---|
Submission | 04/13/2025 08:30 AM (3 months ago) |
---|
Moderation | 04/26/2025 09:08 AM (13 days later) |
---|
Status | Accepted |
---|
VulDB Entry | 306303 [itwanger paicoding 1.0.3 Article /article/api/post articleId improper authorization] |
---|
Points | 18 |
---|