| tiêu đề | Mayuri K. Gaatitrack Courier Management System 1.0 Broken Access Control |
|---|
| Mô tả | A vulnerability, which was classified as high, was found in Mayuri K. Gaatitrack Courier Management System 1.0. This affects the function delete_user of the file ajax.php. The manipulation of the argument id leads to unauthorized deletion. It is possible to launch the attack remotely and without any authentication. This vulnerability allows an attacker to delete arbitrary users from the database, leading to potential service disruption. |
|---|
| Nguồn | ⚠️ https://github.com/zy606/Vulnerability-Report/tree/main/Gaatitrack-Unauth-Delete |
|---|
| Người dùng | Zyyyy (UID 96412) |
|---|
| Đệ trình | 16/03/2026 10:43 (cách đây 7 các tháng) |
|---|
| Kiểm duyệt | 01/04/2026 15:47 (16 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 354664 [SourceCodester/mayuri_k Best Courier Management System 1.0 User Delete ajax.php?action=delete_user id nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|