Submeter #272499: Sourcecodester Employee Management System 1.0 Broken Access Controlinformação

TítuloSourcecodester Employee Management System 1.0 Broken Access Control
DescriçãoMultiple Authenticated Broken Access control Only administrators are allowed to decline or approved a Leave request but we due to weak security measures implemented I was able to decline and accept a request for leave as a employee user.
Fonte⚠️ https://github.com/jomskiller/Employee-Management-System---Stored-XSS/
Utilizador
 jomskiller (UID 62271)
Submissão24/01/2024 14h51 (há 3 anos)
Moderação29/01/2024 08h15 (5 days later)
EstadoDuplicado
Entrada VulDB252279 [SourceCodester Employee Management System 1.0 edit-profile.php Script de Site Cruzado]
Pontos0

Interested in the pricing of exploits?

See the underground prices here!