| शीर्षक | SourceCodester Simple Traffic Offense System using PHP with Source Code 1.0 Missing Authentication |
|---|
| विवरण | The application exposes destructive GET endpoints, including delete-user.php and delete-offence.php, that do not enforce server-side authentication or authorization before deleting records.
An attacker can send a crafted GET request directly to delete-user.php?id=<id> and the server will process the deletion even if the session cookie is removed or the user is otherwise unauthenticated. The same pattern exists in delete-offence.php.
The backend deletion handlers do not validate the current session before executing destructive operations. Instead of enforcing a server-side permission check, the application accepts a GET parameter such as id and performs the delete action immediately.
In the case of delete-offence.php, the current default schema appears to delete from the offence table rather than the reported_offence table used by the listing page. That may affect the visible business impact, but it does not change the security issue: the endpoint remains an unauthenticated destructive entry point. |
|---|
| स्रोत | ⚠️ https://github.com/tan1540684326-QAQ/cve/issues/2 |
|---|
| उपयोगकर्ता | LiuHeQi (UID 99807) |
|---|
| सबमिशन | 27/07/2026 10:25 AM (1 महीना पहले) |
|---|
| संयम | 06/09/2026 05:55 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 399455 [SourceCodester Simple Traffic Offense System 1.0 Deletion Endpoint delete-user.php पहचान कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|