חזרה ללוח
D45אומת בקודP0
`ajax_seat_state` lets an anonymous user free/overwrite any (paid) seat and NULL a ticket
B · unauth-POSTS3 · destructiveSECT1
תיקון
מורכבות medium80%
An anonymous user can free, overwrite, or blank out any paid seat through the open endpoint.
Seater.php:34
תיק מלא
ממצאים קשורים
D13 · God-router: no nonce + no capability …D46 · `ajax_reassign_seat` has no capabilit…D48 · Seat reservation race (read-check-wri…D43 · Price tampering: client `seatPrice` t…D87 · `ajax_seat_state` block() insert has …D60 · `execute_seater_cleaner` `return` not…D65 · `execute_seater_updater` non-atomic J…