| Título | SourceCodester Client Database Management System (CDMS) 1.0 Improper Authorization |
|---|
| Descrição | Client Database Management System 1.0 contains an access control vulnerability in the endpoint /superadmin_delete_manager.php.
The script processes POST requests containing a manager_id parameter and directly executes the deletion operation without validating authentication state or verifying user privileges.
The endpoint does not enforce session checks and does not confirm that the requester has superadmin permissions before performing the delete action.
As a result, an unauthenticated attacker can send a crafted HTTP POST request to delete arbitrary sales manager accounts.
Proof of Concept
curl -X POST http://TARGET/cdm/superadmin_delete_manager.php \
-d "manager_id=3"
Server Response
{"status":"success","message":"Manager deleted successfully."}
The operation succeeds without any authentication token or valid session.
Impact
An attacker can:
Delete arbitrary sales managers
Disrupt business workflows
Compromise data integrity
Bypass privilege restrictions
Potentially affect associated records (sales agents, reports, assignments)
This vulnerability represents a critical failure in access control enforcement.
CVSS v3.1 Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
|---|
| Fonte | ⚠️ https://gist.github.com/Adarshh-A/1aae387a3cf4ea05c871ddafc64d0348 |
|---|
| Utilizador | Adarsh007 (UID 95657) |
|---|
| Submissão | 26/02/2026 10h17 (há 7 meses) |
|---|
| Moderação | 07/03/2026 21h42 (9 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 349740 [SourceCodester Client Database Management System 1.0/3.1 Endpoint superadmin_delete_manager.php manager_id Elevação de Privilégios] |
|---|
| Pontos | 20 |
|---|