| عنوان | CampCodes School Management Software 1.0 Broken Access Control (BAC) |
|---|
| الوصف | Vendor and Product Information:
Vendor: CampCodes
Product: School Management Software
Product URL: https://www.campcodes.com/downloads/school-management-software-in-php-mysql-full-source-code/
Vulnerability Name: Broken Access Control (BAC) - Delete Anyone's Uploaded Document
Description:
It was observed that every document uploaded by anyone has a unique however easily identifiable sequential identifier. In this case the First teacher has uploaded document id of “2” and second teacher has document id of “3”. Exploiting the broken access control vulnerability first teacher is able to delete the second teachers document without their consent. |
|---|
| المصدر | ⚠️ https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Broken%20Access%20Control(BAC)%20-%20Delete%20Anyones%20Uploaded%20Document.pdf |
|---|
| المستخدم | khukuririmal (UID 80171) |
|---|
| ارسال | 02/02/2025 02:09 PM (2 سنوات منذ) |
|---|
| الاعتدال | 10/02/2025 09:01 AM (8 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 292737 [CampCodes School Management Software 1.0 Attachment تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|