| Título | sourcecodester Computer Laboratory Management System 1.0 Insecure Direct Object References (IDOR) and Account Takeover |
|---|
| Descrição | This vulnerability represents a critical security flaw that allows unauthorized access for users to alter their identity information and manipulate profile pictures. Attackers can exploit this vulnerability through IDOR and account takeover attacks, compromising the integrity and confidentiality of the application. This can lead to serious consequences such as spreading malicious content, reputational damage, and unauthorized access to sensitive information. Thus, this vulnerability poses a significant threat to the security of the application.
|
|---|
| Fonte | ⚠️ https://github.com/Sospiro014/zday1/blob/main/idor%2Baccaunt_takeover.md |
|---|
| Utilizador | SoSPiro (UID 67134) |
|---|
| Submissão | 01/04/2024 12h34 (há 3 anos) |
|---|
| Moderação | 01/04/2024 19h42 (7 hours later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 258914 [SourceCodester Computer Laboratory Management System 1.0 Users.php?f=save save_users id Elevação de Privilégios] |
|---|
| Pontos | 0 |
|---|