| Title | dhikshitha29 Insurance-Management-System 125362cc21dca20d74091a4913a5096bb58dd837 Missing Authorization |
|---|
| Description | The affected component is `Insurance_Management_System/Agent/includes/UpdatePolicyHolder-inc.php`, the backend of the policy holder update form. The script performs no session check and no ownership verification; it updates the `Policy_holder` row for whatever `Policy_no` is posted:
```php
if (isset($_POST['submit'])) {
require '../../database.php';
$Policy_no = $_POST['Policy_no'];
$Name = $_POST['Name'];
...
$sql = "UPDATE policy_holder SET Name = ?, Mobile_no = ?, ... WHERE Policy_no = ?";
```
Any unauthenticated remote user can overwrite the personal data (name, email, mobile number, address, nominee, DOB) of any policy holder in the system by guessing or enumerating the numeric `Policy_no`, with no need to belong to the policy's agency. |
|---|
| Source | ⚠️ https://github.com/dhikshitha29/Insurance-Management-System/issues/6 |
|---|
| User | Huan Wu (UID 101973) |
|---|
| Submission | 10/07/2026 16:05 (26 days ago) |
|---|
| Moderation | 10/21/2026 08:55 (14 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 424681 [dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php Policy_no improper authorization] |
|---|
| Points | 20 |
|---|