← Database

CVE-2021-35337

MEDIUM CVSS: 4.3 Published: 2021-07-01 Modified: 2026-06-17

Description

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.

Affected Platforms

Phone Shop Sales Management System Project Phone Shop Sales Management System

Weakness Type

CWE-639

References