| शीर्षक | SourceCodester Client Database Management System (CDMS) 1.0 Improper Authorization |
|---|
| विवरण | Client Database Management System 1.0 contains an access control vulnerability in the endpoint /superadmin_delete_manager.php.
The script processes POST requests containing a manager_id parameter and directly executes the deletion operation without validating authentication state or verifying user privileges.
The endpoint does not enforce session checks and does not confirm that the requester has superadmin permissions before performing the delete action.
As a result, an unauthenticated attacker can send a crafted HTTP POST request to delete arbitrary sales manager accounts.
Proof of Concept
curl -X POST http://TARGET/cdm/superadmin_delete_manager.php \
-d "manager_id=3"
Server Response
{"status":"success","message":"Manager deleted successfully."}
The operation succeeds without any authentication token or valid session.
Impact
An attacker can:
Delete arbitrary sales managers
Disrupt business workflows
Compromise data integrity
Bypass privilege restrictions
Potentially affect associated records (sales agents, reports, assignments)
This vulnerability represents a critical failure in access control enforcement.
CVSS v3.1 Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
|---|
| स्रोत | ⚠️ https://gist.github.com/Adarshh-A/1aae387a3cf4ea05c871ddafc64d0348 |
|---|
| उपयोगकर्ता | Adarsh007 (UID 95657) |
|---|
| सबमिशन | 26/02/2026 10:17 AM (7 महीनों पहले) |
|---|
| संयम | 07/03/2026 09:42 PM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 349740 [SourceCodester Client Database Management System 1.0/3.1 Endpoint superadmin_delete_manager.php manager_id अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|