Auto Dealer Management System version 1.0 suffers from a privilege escalation vulnerability due to a broken access control where a lower privileged user’s cookie can be leveraged to takeover an administrative account.

---

Filed under: exploit - @ February 25, 2023 6:54 am