VULNERABILITY INTELLIGENCE

CVE-2021-35337

CVSS score4.3 MEDIUM
EPSS probability0.82%
CISA KEVNot currently listed
Published2021-07-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.

Weakness classification

  • nvd@nist.gov: CWE-639

Primary references