| 标题 | sourcecodester Computer Laboratory Management System 1.0 Insecure Direct Object References (IDOR) and Account Takeover |
|---|
| 描述 | This vulnerability represents a critical security flaw that allows unauthorized access for users to alter their identity information and manipulate profile pictures. Attackers can exploit this vulnerability through IDOR and account takeover attacks, compromising the integrity and confidentiality of the application. This can lead to serious consequences such as spreading malicious content, reputational damage, and unauthorized access to sensitive information. Thus, this vulnerability poses a significant threat to the security of the application.
|
|---|
| 来源 | ⚠️ https://github.com/Sospiro014/zday1/blob/main/idor%2Baccaunt_takeover.md |
|---|
| 用户 | SoSPiro (UID 67134) |
|---|
| 提交 | 2024-04-01 12時34分 (3 年前) |
|---|
| 管理 | 2024-04-01 19時42分 (7 hours later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 258914 [SourceCodester Computer Laboratory Management System 1.0 Users.php?f=save save_users id 权限提升] |
|---|
| 积分 | 0 |
|---|