CVE-2021-35337

MEDIUM

Phone Shop Sales Managements System 1.0 - Insecure Direct Object Reference (IDOR)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-35337 has a selected CVSS score of 4.3 (medium); EIP currently links 1 catalogued exploit.

Description

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBPhone Shop Sales Managements System 1.0 - Insecure Direct Object Reference (IDOR)ExploitDB exploitby Pratik KhalaneNot analyzed1 file
ExploitDB
PoC details

References

2