| शीर्षक | SOURCECODESTER Employee Task Management System 1.0 IDOR |
|---|
| विवरण | The Employee Task Management System is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability within its `/update-employee.php` component. This flaw permits unauthorized users to alter any employee's password by exploiting the `admin_id` parameter in POST requests. This issue highlights the urgent necessity for implementing robust authentication and authorization checks to restrict sensitive operations to authenticated and authorized users only, ensuring that users cannot perform actions beyond their permissions. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Employee%20Task%20Management%20System/IDOR%20-%20update-employee.php.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 16/03/2024 06:09 PM (3 साल पहले) |
|---|
| संयम | 17/03/2024 09:26 AM (15 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 257080 [SourceCodester Employee Task Management System 1.0 /update-employee.php admin_id अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|