| عنوان | sourcecodester Computer Laboratory Management System 1.0 Insecure Direct Object References (IDOR) and Account Takeover |
|---|
| الوصف | This vulnerability represents a critical security flaw that allows unauthorized access for users to alter their identity information and manipulate profile pictures. Attackers can exploit this vulnerability through IDOR and account takeover attacks, compromising the integrity and confidentiality of the application. This can lead to serious consequences such as spreading malicious content, reputational damage, and unauthorized access to sensitive information. Thus, this vulnerability poses a significant threat to the security of the application.
|
|---|
| المصدر | ⚠️ https://github.com/Sospiro014/zday1/blob/main/idor%2Baccaunt_takeover.md |
|---|
| المستخدم | SoSPiro (UID 67134) |
|---|
| ارسال | 01/04/2024 12:34 PM (3 سنوات منذ) |
|---|
| الاعتدال | 01/04/2024 07:42 PM (7 hours later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 258914 [SourceCodester Computer Laboratory Management System 1.0 Users.php?f=save save_users id تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|