| शीर्षक | code-projects Barangay Resident Profiling Management System (BRPMS) / Barangay San Fabian 1.0 Insecure Direct Object Reference (IDOR) |
|---|
| विवरण | An authenticated IDOR vulnerability exists in the archived resident management workflow of BRPMS.
The application accepts a user-controlled resident_id and performs restore or permanent delete operations against the residents table. Although permanent deletion requires the current user's password, the authorization decision is still limited to "the user knows their own password" rather than "the user is authorized to delete this resident record." The restore action has no password confirmation at all.
Vulnerable restore logic:
$resident_id = $_POST['resident_id'];
$stmt = $conn->prepare("UPDATE residents SET is_archived = 0, date_archived = NULL WHERE id = ?");
Vulnerable delete logic:
$resident_id = $_POST['resident_id'];
$delete_stmt = $conn->prepare("DELETE FROM residents WHERE id = ?");
Relevant code:
archived_records.php, lines 5, 13, 30, 42, and 44
|
|---|
| स्रोत | ⚠️ https://gist.github.com/c4ttr4ck/190b532b4b239fdc8f6fb72d89bde2c8 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 07/07/2026 10:25 PM (2 महीनों पहले) |
|---|
| संयम | 23/08/2026 08:08 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 394525 [code-projects Barangay Resident Profiling Management System 1.0 Restore/Delete /archived_records.php resident_id अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|