| शीर्षक | SourceCodester Web-based-Pharmacy-Product-Management-System 1.0 Business Logic Errors |
|---|
| विवरण | The application fails to enforce proper server-side authorization checks on the patient_id parameter. An authenticated user can manipulate the patient_id value in the URL to submit queue entries on behalf of another patient. The system processes the request without validating whether the authenticated user owns or is authorized to act on the specified patient_id. This results in unauthorized action impersonation. |
|---|
| स्रोत | ⚠️ https://github.com/hiranerakkot/Patients-Waiting-Area-Queue-Management-System/blob/main/README.md |
|---|
| उपयोगकर्ता | Hiran (UID 95719) |
|---|
| सबमिशन | 24/02/2026 10:15 AM (7 महीनों पहले) |
|---|
| संयम | 07/03/2026 06:15 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 349700 [SourceCodester Patients Waiting Area Queue Management System 1.0 /checkin.php patient_id अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|