Описание
Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phone_shop_sales_management_system_project:phone_shop_sales_management_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00124
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-639
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.
EPSS
Процентиль: 32%
0.00124
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-639