Rohan PageyCVE-2022–33077: IDOR to change address of any customer via parameter pollution in nopCommerce <= 4.5TL;DR: A POST request to edit the address endpoint involved two addressID parameters (one in the URL and other in the request body)…Oct 14, 2022Oct 14, 2022
Rohan PageyEdmodo — IDOR to view private files of any classHow I was able to download any file from edmodoApr 6, 2019Apr 6, 2019