Security Advisory
CVE-2021-35337
4.3
MEDIUM
Vulnerability Description
Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.
Published Date
July 1, 2021
Official Source
NIST NVD Advisory