User ID controlled by request parameter with password disclosure 1 User ID controlled by request parameter with password disclosure 04/12/2024