| शीर्षक | SourceCodester Inventory System using PHP and MySQL Source Code 1.0 Improper Privilege Management |
|---|
| विवरण | The application allows unauthenticated users to register arbitrary accounts with administrative privileges because the backend trusts the client-supplied role parameter during registration. An attacker can modify the HTTP request and set role=admin, resulting in privilege escalation and complete compromise of the application. |
|---|
| स्रोत | ⚠️ https://app.notion.com/p/Inventory-System-using-PHP-and-MySQL-Source-Code-390e7248353d803394b5f04bc4230d11 |
|---|
| उपयोगकर्ता | himanshuh4cker (UID 96758) |
|---|
| सबमिशन | 01/07/2026 08:33 AM (3 महीनों पहले) |
|---|
| संयम | 17/08/2026 11:47 AM (2 months later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 369139 [SourceCodester Inventory System 1.0 Account Creation users_handler.php ROLE अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|