Submit #272796: Sourcecodester Employee Management System 1.0 Broken Access Controlinfo

TitelSourcecodester Employee Management System 1.0 Broken Access Control
BeschreibungMultiple Authenticated Broken Access control Only administrators are allowed to decline or approved a Leave request but we due to weak security measures implemented I was able to decline and accept a request for leave as a employee user.
Quelle⚠️ https://github.com/jomskiller/Employee-Managemet-System---Broken-Access-Control
Benutzer
 jomskiller (UID 62271)
Einreichung25.01.2024 04:42 (vor 3 Jahren)
Moderieren29.01.2024 08:15 (4 days later)
StatusAkzeptiert
VulDB Eintrag252280 [SourceCodester Employee Management System 1.0 Leave delete-leave.php id erweiterte Rechte]
Punkte16

Do you know our Splunk app?

Download it now for free!