| Название | sourcecodester Computer Laboratory Management System 1.0 Insecure Direct Object References (IDOR) and Account Takeover |
|---|
| Описание | This vulnerability represents a critical security flaw that allows unauthorized access for users to alter their identity information and manipulate profile pictures. Attackers can exploit this vulnerability through IDOR and account takeover attacks, compromising the integrity and confidentiality of the application. This can lead to serious consequences such as spreading malicious content, reputational damage, and unauthorized access to sensitive information. Thus, this vulnerability poses a significant threat to the security of the application.
|
|---|
| Источник | ⚠️ https://github.com/Sospiro014/zday1/blob/main/idor%2Baccaunt_takeover.md |
|---|
| Пользователь | SoSPiro (UID 67134) |
|---|
| Представление | 01.04.2024 12:34 (3 лет назад) |
|---|
| Модерация | 01.04.2024 19:42 (7 hours later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 258914 [SourceCodester Computer Laboratory Management System 1.0 Users.php?f=save save_users id эскалация привилегий] |
|---|
| Баллы | 0 |
|---|