CVEvulnerability
CVE-2021-35337
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-07-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-639
Description
Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.
Affected configurations
• phone shop sales management system project phone shop sales management system 1.0
Related
Weakness · CWE (1)
- CWE-639 Authorization Bypass Through User-Controlled Key weakness
References
- https://www.exploit-db.com/exploits/50050 Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/50050 Exploit, Third Party Advisory, VDB Entry