Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Unauthorized access to HouseRent exists #12

Open
LvZCh opened this issue Dec 29, 2024 · 0 comments
Open

Unauthorized access to HouseRent exists #12

LvZCh opened this issue Dec 29, 2024 · 0 comments

Comments

@LvZCh
Copy link

LvZCh commented Dec 29, 2024

Source code download link: https://github.com/SingMR/HouseRent/archive/refs/heads/master.zip

Code Audit:
In src/main/java/com/house/wym/controller/AdminController. java, the path was not verified for permissions, resulting in unauthorized access
image

Vulnerability exploitation:
Open directly: http://192.168.0.102:8090/toAdminHomePage
image
image
image
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@LvZCh