Webcollab 3.4.6 - IDOR | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Webcollab 3.4.6 - IDOR

Madde
	Author : Bug Researchers
	Date : 02.02.2019 13:24:14
	# Webcollab 3.4.6 - IDOR [Full Screen Display]

	#################################################################### # Exploit Title: Webcollab 3.4.6 - IDOR (Insecure Direct Object References) # Dork: N/A # Date: 27-01-2019 # Exploit Author: Expertt # Vendor Homepage: https://webcollab.sourceforge.io/ # Software Link: https://sourceforge.net/projects/webcollab/ # Version: 3.4.6 # Category: Webapps # Tested on: Xampp, @Win # CVE: N/A # Software Link : A web-based project management tool for workgroups. Encourage groups and individuals to work collaboratively. This tool aims to be functional and elegant without being complicated or graphically intensive. #################################################################### # Vulnerabilities - POC # In order to use the weakness, we create a user and log into the application with this user. # When we change the id = value in the url section, we see that the user information has changed. # The proof of the deficit is in the link below. # https://i.hizliresim.com/V93k7B.jpg <== userid=4 normal user # https://i.hizliresim.com/QLp6nj.jpg <== userid=1 admin user ####################################################################