We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.
Reserved 2025-02-07 | Published 2025-04-24 | Updated 2025-04-25 | Assigner mitrecodeastro.com/...system-in-php-codeigniter-with-source-code/
github.com/...ulnerability-Research/tree/main/CVE-2025-25777
Support options
