MEDIUM🇵🇱 Wersja polska

CVE-2021-35337

CVSS 4.3v3.1pub. 2021-07-01upd. 2024-11-21

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

  • Phone Shop Sales Management System Project Phone Shop Sales Management System

    APP
    Phone Shop Sales Management System Project
    1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
IDOR
CWE
References

Related vulnerabilities

CVE-2021-36560CRITICAL9.8PL ✓same product

Authentication Bypass prowadzący do przejęcia konta admina w Phone Shop Sales Management System

CVE-2021-36623CRITICAL9.8PL ✓same product

Arbitrary File Upload umożliwiający RCE w Phone Shop Sales Management System

CVE-2021-36624CRITICAL9.8PL ✓same product

SQL Injection umożliwiający ominięcie uwierzytelnienia w Phone Shop Sales Management System