| عنوان | SourceCodester Pet Grooming Management Software 1.0 Improper Authorization |
|---|
| الوصف | The application fails to enforce server-side role-based access control on financial reporting endpoints. A low-privileged authenticated user can access and view sensitive financial data, including tax reports, profit reports, invoice details, and user reports. The system does not validate user role before rendering these pages. |
|---|
| المصدر | ⚠️ https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_2.md |
|---|
| المستخدم | Hiran (UID 95719) |
|---|
| ارسال | 25/02/2026 12:55 PM (7 أشهر منذ) |
|---|
| الاعتدال | 07/03/2026 07:11 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 349716 [SourceCodester Pet Grooming Management Software 1.0 Financial Report Page تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|