User ID controlled by request parameter, with unpredictable user IDs
Laboratorio de Portswigger sobre Broken Access Control
Justice-Reaper
User ID controlled by request parameter
Laboratorio de Portswigger sobre Broken Access Control
User role can be modified in user profile
Laboratorio de Portswigger sobre Broken Access Control
User role controlled by request parameter
Laboratorio de Portswigger sobre Broken Access Control
Unprotected admin functionality with unpredictable URL
Laboratorio de Portswigger sobre Broken Access Control
Unprotected admin functionality
Laboratorio de Portswigger sobre Broken Access Control
Information disclosure in version control history
Laboratorio de Portswigger sobre Information Disclosure
Authentication bypass via information disclosure
Laboratorio de Portswigger sobre Information Disclosure
Source code disclosure via backup files
Laboratorio de Portswigger sobre Information Disclosure
Information disclosure on debug page
Laboratorio de Portswigger sobre Information Disclosure