| عنوان | SourceCodester Client Database Management System (CDMS) 1.0 Improper Authorization |
|---|
| الوصف | Client Database Management System 1.0 contains an access control vulnerability in the endpoint /superadmin_delete_manager.php.
The script processes POST requests containing a manager_id parameter and directly executes the deletion operation without validating authentication state or verifying user privileges.
The endpoint does not enforce session checks and does not confirm that the requester has superadmin permissions before performing the delete action.
As a result, an unauthenticated attacker can send a crafted HTTP POST request to delete arbitrary sales manager accounts.
Proof of Concept
curl -X POST http://TARGET/cdm/superadmin_delete_manager.php \
-d "manager_id=3"
Server Response
{"status":"success","message":"Manager deleted successfully."}
The operation succeeds without any authentication token or valid session.
Impact
An attacker can:
Delete arbitrary sales managers
Disrupt business workflows
Compromise data integrity
Bypass privilege restrictions
Potentially affect associated records (sales agents, reports, assignments)
This vulnerability represents a critical failure in access control enforcement.
CVSS v3.1 Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
|---|
| المصدر | ⚠️ https://gist.github.com/Adarshh-A/1aae387a3cf4ea05c871ddafc64d0348 |
|---|
| المستخدم | Adarsh007 (UID 95657) |
|---|
| ارسال | 26/02/2026 10:17 AM (7 أشهر منذ) |
|---|
| الاعتدال | 07/03/2026 09:42 PM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 349740 [SourceCodester Client Database Management System 1.0/3.1 Endpoint superadmin_delete_manager.php manager_id تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|