CVE-2021-35337

MEDIUM 4.3CVE-2021-35337 · Published 01/07/2021 · updated 17/06/2026

In short

CVE-2021-35337 is a MEDIUM (CVSS 4.3) vulnerability affecting phone shop sales management system (phone shop sales management system project).
Chance of exploitation in the next 30 days (EPSS): 0.82%, higher than 57.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phone shop sales management system phone_shop_sales_management_system_project	`= 1.0`	No fix yet

Description

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.

References

exploit-db.com/exploits/50050 · Exploit

More vulnerabilities in phone shop sales management system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free