| タイトル | sourcecodester Computer Laboratory Management System 1.0 Insecure Direct Object References (IDOR) and Account Takeover |
|---|
| 説明 | This vulnerability represents a critical security flaw that allows unauthorized access for users to alter their identity information and manipulate profile pictures. Attackers can exploit this vulnerability through IDOR and account takeover attacks, compromising the integrity and confidentiality of the application. This can lead to serious consequences such as spreading malicious content, reputational damage, and unauthorized access to sensitive information. Thus, this vulnerability poses a significant threat to the security of the application.
|
|---|
| ソース | ⚠️ https://github.com/Sospiro014/zday1/blob/main/idor%2Baccaunt_takeover.md |
|---|
| ユーザー | SoSPiro (UID 67134) |
|---|
| 送信 | 2024年04月01日 12:34 (2 年 ago) |
|---|
| モデレーション | 2024年04月01日 19:42 (7 hours later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 258914 [SourceCodester Computer Laboratory Management System 1.0 Users.php?f=save save_users id 特権昇格] |
|---|
| ポイント | 0 |
|---|