| 제목 | code-projects Invoice System in Laravel 1.0 Insecure Direct Object Reference (IDOR) |
|---|
| 설명 | The profile workflow uses a user-controlled id in the route and fails to verify that the requested profile belongs to the authenticated user. This allows an attacker to view or modify any user's profile data by simply changing the ID in the URL. |
|---|
| 원천 | ⚠️ https://gist.github.com/higordiego/9b5f076d7f651e45c0f30ae14bab3b4e |
|---|
| 사용자 | c4ttr4ck (UID 75518) |
|---|
| 제출 | 2026. 04. 09. AM 12:17 (5 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 26. AM 10:49 (17 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 359667 [code-projects Invoice System in Laravel 1.0 Profile /profile/ 아이디 권한 상승] |
|---|
| 포인트들 | 16 |
|---|