Link to project: cookandrun.fun
Cookandrun is a platform which helps you to organize your own running dinner events.
You can read more about the project on my blog
Link to project: cookandrun.fun
Cookandrun is a platform which helps you to organize your own running dinner events.
You can read more about the project on my blog
Hi,
it seems that the application is vulnerable to "horizontal privilege escalation".
As an attacker it's possible to open the following link:
http://www.cookandrun.fun/event/X/delete
Instead of the "X" - you are using the ID of the event you want to delete. This means any user can delete an event of another user. It's better to check for permissions before deleting this events.
Kind regards
Tim
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.