| शीर्षक | SourceCodester Web-based-Pharmacy-Product-Management-System 1.0 Improper Access Controls |
|---|
| विवरण | The application does not invalidate active sessions after account deletion.
When an Super Admin deletes a Admin account, any previously authenticated session (PHPSESSID) associated with that account remains valid.
Although new login attempts fail, the existing session continues to grant access to protected administrative pages until manual logout or session expiration.
This results in a privilege revocation bypass and constitutes Improper Access Control.
|
|---|
| स्रोत | ⚠️ https://github.com/hiranerakkot/Web-based-Pharmacy-Product-Management-System/blob/main/README.md |
|---|
| उपयोगकर्ता | Hiran (UID 95719) |
|---|
| सबमिशन | 19/02/2026 12:16 PM (8 महीनों पहले) |
|---|
| संयम | 01/03/2026 07:44 AM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 348296 [SourceCodester Web-based Pharmacy Product Management System 1.0 कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|