CVE-2022-30760

An Insecure Direct Object Reference IDOR issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information final grades, study courses, degrees by changing the student ID parameter in the HTTP POST request to the FrontControllerSS...

CVE-2022-30760

An Insecure Direct Object Reference IDOR issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information final grades, study courses, degrees by changing the student ID parameter in the HTTP POST request to the FrontControllerSS...

Design/Logic Flaw

An Insecure Direct Object Reference IDOR issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information final grades, study courses, degrees by changing the student ID parameter in the HTTP POST request to the FrontControllerSS...

CVE-2022-30760

An Insecure Direct Object Reference IDOR issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information final grades, study courses, degrees by changing the student ID parameter in the HTTP POST request to the FrontControllerSS...

PT-2022-20299

Name of the Vulnerable Software and Affected Versions ihb eG FlexNow versions prior to 2.04.09.016 Description The issue is an Insecure Direct Object Reference IDOR that allows remote authenticated attackers to obtain sensitive student information, including final grades, study courses, and...

CVE-2022-30760: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference IDOR issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information final grades, study courses, degrees by changing the student ID parameter in the HTTP POST request to the FrontControllerSS...

FlexNow security vulnerabilities

FlexNow is the online portal for all students in the RUB Engineering Department and Business Studies. A security vulnerability exists in FlexNow versions prior to 2.04.09.016, which stems from an insecure direct object reference IDOR issue, and can be exploited by an attacker to change the studen...