14 lines
No EOL
431 B
Text
14 lines
No EOL
431 B
Text
# Exploit Title: H8 SSRMS - 'id' IDOR
|
|
# Date: 01/31/2021
|
|
# Exploit Author: Mohammed Farhan
|
|
# Vendor Homepage: https://www.height8tech.com/
|
|
# Version: H8 SSRMS
|
|
# Tested on: Windows 10
|
|
|
|
|
|
Vulnerability Details
|
|
======================
|
|
Login to the application
|
|
Navigate to Payment Section and Click on Print button.
|
|
In QuotePrint.aspx, modify the id Parameter to View User details, Address,
|
|
Payments, Phonenumber and Email of other Users |