Submit #557251: itwanger paicoding 1.0.3 Logical loopholes 2info

Titleitwanger paicoding 1.0.3 Logical loopholes 2
DescriptionIn Paicoding system v1.0.3, by modifying the interface of one's own article and changing the article ID to someone else's, it is possible to move someone else's article to one's own management, and at the same time, someone else's article will be deleted. Hackers can exploit this vulnerability to delete someone else's article
Source⚠️ https://github.com/uglory-gll/javasec/blob/main/paicoding.md
User
 uglory (UID 82151)
Submission04/13/2025 08:30 (1 Year ago)
Moderation04/26/2025 09:08 (13 days later)
StatusAccepted
VulDB entry306303 [itwanger paicoding 1.0.3 Article /article/api/post articleId improper authorization]
Points18

Do you want to use VulDB in your project?

Use the official API to access entries easily!