| शीर्षक | github Cafe Management System (CafeManagement) 1.0 Missing Authentication → Unauthenticated Privileged Account Crea |
|---|
| विवरण | CafeManagement performs no authentication or session management anywhere — there is no session_start() and no use of $_SESSION in any server-side script. Consequently the entire administrative interface ("Admin's Portal": Add Cashier, Add Product, Customers, Dashboard) is reachable directly by URL by an anonymous, unauthenticated remote attacker.
This is directly exploitable to create privileged accounts. The handler AddCashierCode.php accepts the POST parameters uname, pass, role and status and inserts a new account with an attacker-controlled Role, with no authentication or authorization check:
$Username=$_POST['uname'];
$Password=$_POST['pass'];
$Role=$_POST['role'];
$Status=$_POST['status'];
...
if($action == "Add"){
$sql = "INSERT INTO addcashier (Username, Password, Role, Status, Image)
VALUES ('$Username','$Password','$Role','$Status','$newfilename')";
mysqli_query($con, $sql);
} |
|---|
| स्रोत | ⚠️ https://github.com/yashkeral/cve-writeups/blob/main/cafemanagement/03-missing-auth-account-creation.md |
|---|
| उपयोगकर्ता | Yashkumar Keral (UID 99903) |
|---|
| सबमिशन | 21/07/2026 08:10 PM (2 महीनों पहले) |
|---|
| संयम | 23/09/2026 03:09 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 408959 [Neethuharii CafeManagement AddCashierCode.php addcashier uname/pass/role/status अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|