Submit #472081: CodeAstro Online Food Ordering System 1.0 Broken Access Controlinfo

TitleCodeAstro Online Food Ordering System 1.0 Broken Access Control
DescriptionVendor and Product Information: Vendor: CodeAstro Product: Online Food Ordering System Product URL: https://codeastro.com/online-food-ordering-system-in-php-mysql-with-source-code/ Confidence: Confirmed Description: The Online Food Ordering System application has a Broken Access Control vulnerability, enabling an unauthenticated attacker to access restricted admin pages. This security flaw could result in unauthorized actions, exposure of sensitive information, or potential disruption of the system's functionality.
Source⚠️ https://github.com/shaturo1337/POCs/blob/main/Broken%20Access%20Control%20in%20Online%20Food%20Ordering%20System.md
User
 John Correche (UID 79510)
Submission12/30/2024 10:08 (1 Year ago)
Moderation12/31/2024 09:35 (23 hours later)
StatusAccepted
VulDB entry289823 [CodeAstro Online Food Ordering System 1.0 All Users Page /admin/all_users.php access control]
Points20

Interested in the pricing of exploits?

See the underground prices here!