| शीर्षक | SourceCodester Pet Grooming Management Software 1.0 Improper Authorization |
|---|
| विवरण | The application does not enforce proper server-side role validation on the add_user.php endpoint. A low-privileged authenticated user can directly access the user creation page and successfully create new standard user accounts. The system fails to verify whether the authenticated session has administrative privileges before processing the request. Although administrator accounts cannot be created, unauthorized user creation is still permitted. |
|---|
| स्रोत | ⚠️ https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_1.md |
|---|
| उपयोगकर्ता | Hiran (UID 95719) |
|---|
| सबमिशन | 25/02/2026 12:52 PM (7 महीनों पहले) |
|---|
| संयम | 07/03/2026 07:11 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 349715 [SourceCodester Pet Grooming Management Software 1.0 User Creation add_user.php अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|