Technology

81373 readers

4152 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

founded 2 years ago

MODERATORS

submitted 8 hours ago by Beep@lemmus.org to c/technology@lemmy.world

3 comments fedilink hide all child comments

Insecure super admin APIs on Dava India Pharmacy’s website made it possible to create a high-privileged super admin account.
Super admins had complete control over the entire website and pharmacy backend, including access to:

883 stores
Nearly 17,000 orders (customer information included)
Edit more than 1,500 products, including the ability to change price and remove prescription requirements
Create coupons, such as 100% off
Change aspects of the website, like the YouTube videos displayed

top 3 comments

sorted by: hot top controversial new old

[–] eager_eagle@lemmy.world 3 points 4 hours ago

Since there was no example request/code to create a super admin account, the fact that the response told me what was missing was incredibly helpful.

🤗

[–] Nurse_Robot@lemmy.world 9 points 8 hours ago

Oooh that was a fun read

[–] DudeImMacGyver@kbin.earth 4 points 6 hours ago

Crazy how much shitty security there is out there