Vulnerabilities

The application suffers from a privilege escalation vulnerability.

The application suffers from improper access control when editing users.

The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.

The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the transmitter.