4 matches found
PT-2026-34333
An insecure direct object reference IDOR vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users through various vulnerable authenticated resources in the application. The vulnerable endpoints result from:...
CVE-2025-21092
GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others...
CVE-2019-7634
CVE-2019-7634 affects the SUAP V2 web application, where a cross-site scripting (XSS) flaw occurs during the update of user information. Connected sources indicate the root cause as insufficient validation of client data, enabling injection of script in user-update flows. The NVD metrics show a n...
