Sales Tracker Management System 1.0 Insecure Direct Object Reference

`# Exploit Title: Sales Tracker Management System v1.0 - Sensitive information disclosure  
# CVE: CVE-2023-26774  
# Exploit Author: Achuth V P (retrymp3)  
# Date: February 08, 2023  
# Vendor Homepage: https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html  
# Software Link: https://www.sourcecodester.com/download-code?nid=16061&title=Sales+Tracker+Management+System+using+PHP+Free+Source+Code  
# Tested on: Ubuntu, Apache, Mysql  
# Vendor: oretnom23  
# Version: v1.0  
# Exploit Description: An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint.  
  
Browse to, <application base url>/admin/reports/sales.php  
you can access the content of sales.php page, which should only be accessed by the admin.  
`