| タイトル | SourceCodester Employee Management System 1.0 IDOR |
|---|
| 説明 | A critical Insecure Direct Object Reference (IDOR) vulnerability exists in the SourceCodester Employee Management System's myprofile.php script. By manipulating the id parameter in the URL, attackers can access other employees' profiles without proper authorization, potentially exposing sensitive information. This flaw could lead to unauthorized disclosure of personal details or salary data, posing a significant privacy risk and potential compliance violations. Remediation involves implementing robust access controls and encryption measures to restrict access to authorized users and protect sensitive information from unauthorized disclosure. |
|---|
| ソース | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20EMPLOYEE%20MANAGEMENT%20SYSTEM/IDOR%20Employee%20Profile.md |
|---|
| ユーザー | nochizplz (UID 64302) |
|---|
| 送信 | 2024年02月24日 12:07 (3 年 ago) |
|---|
| モデレーション | 2024年02月25日 19:30 (1 day later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 254726 [SourceCodester Employee Management System 1.0 /myprofile.php 識別子 SQLインジェクション] |
|---|
| ポイント | 20 |
|---|