Skip to content
OpenAdvisories

Vendor

harung1993

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    DollarDollar through 4.4 Missing Authorization in /add_expense Balance Tampering

    DollarDollar through 4.4 contains a missing authorization vulnerability in add_expense() that allows authenticated users to modify other users' account balances by supplying foreign account_id values. Attackers can submit sequential account_id, destination_ac…